{"incident_id":"SEA-8K-0000045012-24-000052","evidence_tier":"incident_disclosure","title":"Halliburton Co discloses a cybersecurity incident with data taken without authorization (SEC 8-K, September 2024)","summary":"As previously disclosed in a Current Report on Form 8-K, on August 21, 2024, Halliburton Company (the “Company”) became aware that an unauthorized third party gained access to certain of its systems.","organization":"Halliburton Co","incident_date":"2024-09-03","date_basis":"disclosure","source_type":"regulator_report","source_title":"Halliburton Co, Form 8-K (Item 1.05), filed 2024-09-03","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/45012/000004501224000052/hal-20240830.htm","failure_patterns":"SEA-FM-014;SEA-FM-009","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000045012-24-000052"}
{"incident_id":"SEA-8K-0000105770-26-000068","evidence_tier":"incident_disclosure","title":"West Pharmaceutical Services Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, May 2026)","summary":"On May 7, 2026, West Pharmaceutical Services, Inc. (the “Company”) determined that the Company has experienced a material cybersecurity attack, in which certain data was exfiltrated by an unauthorized party and certain…","organization":"West Pharmaceutical Services Inc","incident_date":"2026-05-11","date_basis":"disclosure","source_type":"regulator_report","source_title":"West Pharmaceutical Services Inc, Form 8-K (Item 1.05), filed 2026-05-11","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/105770/000010577026000068/wst-20260507.htm","failure_patterns":"SEA-FM-014;SEA-FM-009","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000105770-26-000068"}
{"incident_id":"SEA-8K-0000318154-26-000119","evidence_tier":"incident_disclosure","title":"Amgen Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, July 2026)","summary":"In July 2026, Amgen Inc. (the \"Company\") identified unauthorized activity involving data stored in cloud environments hosted by third-party cloud service providers.","organization":"Amgen Inc","incident_date":"2026-07-31","date_basis":"disclosure","source_type":"regulator_report","source_title":"Amgen Inc, Form 8-K (Item 1.05), filed 2026-07-31","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/318154/000031815426000119/amgn-20260729.htm","failure_patterns":"SEA-FM-009","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000318154-26-000119"}
{"incident_id":"SEA-8K-0000719733-24-000015","evidence_tier":"incident_disclosure","title":"Key Tronic Corp discloses a cybersecurity incident (SEC 8-K, May 2024)","summary":"On May 6, 2024, Key Tronic Corporation (the “Company”) detected unauthorized third party access to portions of its information technology (“IT”) systems.","organization":"Key Tronic Corp","incident_date":"2024-05-10","date_basis":"disclosure","source_type":"regulator_report","source_title":"Key Tronic Corp, Form 8-K (Item 1.05), filed 2024-05-10","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/719733/000071973324000015/ktcc-20240506.htm","failure_patterns":"SEA-FM-014","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000719733-24-000015"}
{"incident_id":"SEA-8K-0000731766-24-000045","evidence_tier":"incident_disclosure","title":"Unitedhealth Group Inc discloses a cybersecurity incident (SEC 8-K, February 2024)","summary":"On February 21, 2024, UnitedHealth Group (the “Company”) identified a suspected nation-state associated cyber security threat actor had gained access to some of the Change Healthcare information technology systems.","organization":"Unitedhealth Group Inc","incident_date":"2024-02-22","date_basis":"disclosure","source_type":"regulator_report","source_title":"Unitedhealth Group Inc, Form 8-K (Item 1.05), filed 2024-02-22","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/731766/000073176624000045/unh-20240221.htm","failure_patterns":"SEA-FM-014","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000731766-24-000045"}
{"incident_id":"SEA-8K-0000732717-24-000046","evidence_tier":"incident_disclosure","title":"AT&T Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, July 2024)","summary":"On April 19, 2024, AT&T Inc. (“AT&T”) learned that a threat actor claimed to have unlawfully accessed and copied AT&T call logs.","organization":"AT&T Inc.","incident_date":"2024-07-12","date_basis":"disclosure","source_type":"regulator_report","source_title":"AT&T Inc., Form 8-K (Item 1.05), filed 2024-07-12","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/732717/000073271724000046/t-20240506.htm","failure_patterns":"SEA-FM-009","capabilities":"auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000732717-24-000046"}
{"incident_id":"SEA-8K-0000885725-26-000059","evidence_tier":"incident_disclosure","title":"Boston Scientific Corp discloses a cybersecurity incident (SEC 8-K, September 2026)","summary":"As previously disclosed in a Current Report on Form 8-K filed on August 26, 2026 with the Securities and Exchange Commission, on August 25, 2026, Boston Scientific Corporation (the “ Company ”) identified a cybersecurity…","organization":"Boston Scientific Corp","incident_date":"2026-09-08","date_basis":"disclosure","source_type":"regulator_report","source_title":"Boston Scientific Corp, Form 8-K (Item 1.05), filed 2026-09-08","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/885725/000088572526000059/bsx-20260907.htm","failure_patterns":"SEA-FM-014","capabilities":"auth.financial_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000885725-26-000059"}
{"incident_id":"SEA-8K-0000950103-24-002017","evidence_tier":"incident_disclosure","title":"SouthState Corp discloses a cybersecurity incident (SEC 8-K, February 2024)","summary":"SouthState Bank, N.A., (the \"Company\") detected what was determined to be a cybersecurity incident on February 6, 2024.","organization":"SouthState Corp","incident_date":"2024-02-09","date_basis":"disclosure","source_type":"regulator_report","source_title":"SouthState Corp, Form 8-K (Item 1.05), filed 2024-02-09","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/764038/000095010324002017/dp206600_8k.htm","failure_patterns":"SEA-FM-014","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000950103-24-002017"}
{"incident_id":"SEA-8K-0000950123-23-011228","evidence_tier":"incident_disclosure","title":"V F Corp discloses a cybersecurity incident (SEC 8-K, December 2023)","summary":"On December 13, 2023, VF Corporation (“VF” or the “Company”) detected unauthorized occurrences on a portion of its information technology (IT) systems.","organization":"V F Corp","incident_date":"2023-12-18","date_basis":"disclosure","source_type":"regulator_report","source_title":"V F Corp, Form 8-K (Item 1.05), filed 2023-12-18","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/103379/000095012323011228/d659095d8k.htm","failure_patterns":"SEA-FM-014;SEA-FM-009","capabilities":"auth.financial_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000950123-23-011228"}
{"incident_id":"SEA-8K-0000950170-23-072513","evidence_tier":"incident_disclosure","title":"First American Financial Corp discloses a cybersecurity incident (SEC 8-K, December 2023)","summary":"First American Financial Corporation (the &x201c;Company&x201d;) recently identified unauthorized activity on certain of its information technology systems.","organization":"First American Financial Corp","incident_date":"2023-12-22","date_basis":"disclosure","source_type":"regulator_report","source_title":"First American Financial Corp, Form 8-K (Item 1.05), filed 2023-12-22","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1472787/000095017023072513/faf-20231220.htm","failure_patterns":"SEA-FM-014","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000950170-23-072513"}
{"incident_id":"SEA-8K-0000950170-24-030041","evidence_tier":"incident_disclosure","title":"Marinemax Inc discloses a cybersecurity incident (SEC 8-K, March 2024)","summary":"MarineMax, Inc. (the \"Company\") determined on March 10, 2024, that it experienced a “cybersecurity incident,” as defined in applicable Securities and Exchange Commission rules, whereby a third party gained unauthorized…","organization":"Marinemax Inc","incident_date":"2024-03-12","date_basis":"disclosure","source_type":"regulator_report","source_title":"Marinemax Inc, Form 8-K (Item 1.05), filed 2024-03-12","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1057060/000095017024030041/hzo-20240310.htm","failure_patterns":"SEA-FM-014","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000950170-24-030041"}
{"incident_id":"SEA-8K-0000950170-24-033954","evidence_tier":"incident_disclosure","title":"Radiant Logistics, Inc discloses a cybersecurity incident (SEC 8-K, March 2024)","summary":"On or about March 14, 2024, through its information technology systems monitoring tools, Radiant Logistics, Inc. (the “Company”) detected what was determined to be the initial stages of a cybersecurity incident related…","organization":"Radiant Logistics, Inc","incident_date":"2024-03-20","date_basis":"disclosure","source_type":"regulator_report","source_title":"Radiant Logistics, Inc, Form 8-K (Item 1.05), filed 2024-03-20","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1171155/000095017024033954/rlgt-20240319.htm","failure_patterns":"SEA-FM-014","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000950170-24-033954"}
{"incident_id":"SEA-8K-0000950170-24-089345","evidence_tier":"incident_disclosure","title":"Meta Materials Inc. discloses a cybersecurity incident (SEC 8-K, August 2024)","summary":"On July 25, 2024, Meta Materials Inc. (the “Company”) became aware that its website, email system and other related information technology (IT) systems were significantly disrupted and taken offline.","organization":"Meta Materials Inc.","incident_date":"2024-08-01","date_basis":"disclosure","source_type":"regulator_report","source_title":"Meta Materials Inc., Form 8-K (Item 1.05), filed 2024-08-01","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1431959/000095017024089345/mmat-20240725.htm","failure_patterns":"SEA-FM-014","capabilities":"data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0000950170-24-089345"}
{"incident_id":"SEA-8K-0001020859-25-000036","evidence_tier":"incident_disclosure","title":"United Natural Foods Inc discloses a cybersecurity incident (SEC 8-K, June 2025)","summary":"As previously disclosed in a Current Report on Form 8-K filed with the Securities and Exchange Commission (“SEC”) on June 9, 2025 (the “Prior 8-K”), on June 5, 2025 , United Natural Foods, Inc.","organization":"United Natural Foods Inc","incident_date":"2025-06-26","date_basis":"disclosure","source_type":"regulator_report","source_title":"United Natural Foods Inc, Form 8-K (Item 1.05), filed 2025-06-26","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1020859/000102085925000036/unfi-20250621.htm","failure_patterns":"","capabilities":"auth.financial_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001020859-25-000036"}
{"incident_id":"SEA-8K-0001023731-26-000084","evidence_tier":"incident_disclosure","title":"8x8 Inc /de/ discloses a cybersecurity incident with data taken without authorization (SEC 8-K, June 2026)","summary":"On June 13, 2026, 8x8, Inc. (the “ Company ” or “ we” ) was informed that an unauthorized third party threat actor exploited the Klue Labs, Inc.","organization":"8x8 Inc /de/","incident_date":"2026-06-23","date_basis":"disclosure","source_type":"regulator_report","source_title":"8x8 Inc /de/, Form 8-K (Item 1.05), filed 2026-06-23","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1023731/000102373126000084/eght-20260617.htm","failure_patterns":"SEA-FM-014;SEA-FM-013;SEA-FM-009","capabilities":"auth.destructive_action;auth.external_communication;data.pii;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001023731-26-000084"}
{"incident_id":"SEA-8K-0001043509-24-000060","evidence_tier":"incident_disclosure","title":"Sonic Automotive Inc discloses a cybersecurity incident (SEC 8-K, July 2024)","summary":"As previously disclosed on its Current Report on Form 8-K filed on June 21, 2024, Sonic Automotive, Inc. (the “Company”) has experienced disruptions since June 19, 2024 in its access to certain information systems…","organization":"Sonic Automotive Inc","incident_date":"2024-07-05","date_basis":"disclosure","source_type":"regulator_report","source_title":"Sonic Automotive Inc, Form 8-K (Item 1.05), filed 2024-07-05","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1043509/000104350924000060/sah-20240705.htm","failure_patterns":"SEA-FM-014","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001043509-24-000060"}
{"incident_id":"SEA-8K-0001048695-25-000149","evidence_tier":"incident_disclosure","title":"F5, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, October 2025)","summary":"On August 9, 2025, F5, Inc. (the “Company”, “F5”, “we”, or “our”) learned that a highly sophisticated nation-state threat actor had gained unauthorized access to certain Company systems.","organization":"F5, Inc.","incident_date":"2025-10-15","date_basis":"disclosure","source_type":"regulator_report","source_title":"F5, Inc., Form 8-K (Item 1.05), filed 2025-10-15","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1048695/000104869525000149/ffiv-20251015.htm","failure_patterns":"SEA-FM-013;SEA-FM-009","capabilities":"auth.public_publication;data.pii;arch.distributed_tx","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001048695-25-000149"}
{"incident_id":"SEA-8K-0001079973-25-001631","evidence_tier":"incident_disclosure","title":"Jewett Cameron Trading Co Ltd discloses a cybersecurity incident with data taken without authorization (SEC 8-K, October 2025)","summary":"Ltd. (the “Company”) learned that a threat actor had gained unauthorized access to portions of the Company’s information technology (“IT”) environment and claimed to have unlawfully accessed certain Company information…","organization":"Jewett Cameron Trading Co Ltd","incident_date":"2025-10-21","date_basis":"disclosure","source_type":"regulator_report","source_title":"Jewett Cameron Trading Co Ltd, Form 8-K (Item 1.05), filed 2025-10-21","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/885307/000107997325001631/jctc_8k.htm","failure_patterns":"SEA-FM-014;SEA-FM-009","capabilities":"auth.financial_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001079973-25-001631"}
{"incident_id":"SEA-8K-0001079973-26-000721","evidence_tier":"incident_disclosure","title":"Oncology Institute, Inc. discloses a cybersecurity incident (SEC 8-K, May 2026)","summary":"The Oncology Institute, Inc. (the “Company”) is providing this disclosure, as a follow-up to its voluntary disclosure in Item 7.01 of a Current Report on Form 8-K filed on November 6, 2025, regarding a cybersecurity…","organization":"Oncology Institute, Inc.","incident_date":"2026-05-22","date_basis":"disclosure","source_type":"regulator_report","source_title":"Oncology Institute, Inc., Form 8-K (Item 1.05), filed 2026-05-22","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1799191/000107997326000721/toi_8k.htm","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001079973-26-000721"}
{"incident_id":"SEA-8K-0001104659-24-028288","evidence_tier":"incident_disclosure","title":"Cencora, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, February 2024)","summary":"On February 21, 2024, Cencora, Inc. (the “Company”), learned that data from its information systems had been exfiltrated, some of which may contain personal information.","organization":"Cencora, Inc.","incident_date":"2024-02-27","date_basis":"disclosure","source_type":"regulator_report","source_title":"Cencora, Inc., Form 8-K (Item 1.05), filed 2024-02-27","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1140859/000110465924028288/tm247267d1_8k.htm","failure_patterns":"SEA-FM-009","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001104659-24-028288"}
{"incident_id":"SEA-8K-0001104659-26-080297","evidence_tier":"incident_disclosure","title":"AdaptHealth Corp. discloses a cybersecurity incident involving social engineering (SEC 8-K, July 2026)","summary":"AdaptHealth Corp. (the “Company”) is investigating a security incident whereby a threat actor gained unauthorized access to Company systems and exfiltrated certain data therefrom.","organization":"AdaptHealth Corp.","incident_date":"2026-07-02","date_basis":"disclosure","source_type":"regulator_report","source_title":"AdaptHealth Corp., Form 8-K (Item 1.05), filed 2026-07-02","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1725255/000110465926080297/ahco-20260627x8k.htm","failure_patterns":"SEA-FM-012;SEA-FM-009","capabilities":"auth.financial_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001104659-26-080297"}
{"incident_id":"SEA-8K-0001104659-26-104300","evidence_tier":"incident_disclosure","title":"Park Dental Partners, Inc. discloses a cybersecurity incident (SEC 8-K, September 2026)","summary":"On August 28, 2026 , Park Dental Partners, Inc. (“we” or the “Company”) identified unauthorized access to its computer network.","organization":"Park Dental Partners, Inc.","incident_date":"2026-09-01","date_basis":"disclosure","source_type":"regulator_report","source_title":"Park Dental Partners, Inc., Form 8-K (Item 1.05), filed 2026-09-01","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/2069604/000110465926104300/park-20260828x8k.htm","failure_patterns":"SEA-FM-014","capabilities":"data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001104659-26-104300"}
{"incident_id":"SEA-8K-0001104659-26-109813","evidence_tier":"incident_disclosure","title":"Astrana Health, Inc. discloses a cybersecurity incident involving social engineering (SEC 8-K, September 2026)","summary":"Astrana Health, Inc. (the “Company”) recently became aware that its subsidiary Astrana Health Management, Inc. detected unusual activity within its environment.","organization":"Astrana Health, Inc.","incident_date":"2026-09-23","date_basis":"disclosure","source_type":"regulator_report","source_title":"Astrana Health, Inc., Form 8-K (Item 1.05), filed 2026-09-23","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1083446/000110465926109813/asth-20260922x8k.htm","failure_patterns":"SEA-FM-012;SEA-FM-009","capabilities":"auth.financial_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001104659-26-109813"}
{"incident_id":"SEA-8K-0001104659-26-115541","evidence_tier":"incident_disclosure","title":"Park Dental Partners, Inc. discloses a cybersecurity incident (SEC 8-K, October 2026)","summary":"As previously reported, on August 28, 2026 , Park Dental Partners, Inc. (“Company”) identified unauthorized access to its computer network.","organization":"Park Dental Partners, Inc.","incident_date":"2026-10-13","date_basis":"disclosure","source_type":"regulator_report","source_title":"Park Dental Partners, Inc., Form 8-K (Item 1.05), filed 2026-10-13","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/2069604/000110465926115541/park-20261007x8k.htm","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001104659-26-115541"}
{"incident_id":"SEA-8K-0001140361-26-027441","evidence_tier":"incident_disclosure","title":"Navient Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, July 2026)","summary":"On June 8, 2026, the Company became aware of a cybersecurity incident involving a third party law firm (the “Firm”) that provides services to the Company.","organization":"Navient Corp","incident_date":"2026-07-02","date_basis":"disclosure","source_type":"regulator_report","source_title":"Navient Corp, Form 8-K (Item 1.05), filed 2026-07-02","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1593538/000114036126027441/ef20077249_8k.htm","failure_patterns":"SEA-FM-014","capabilities":"auth.financial_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001140361-26-027441"}
{"incident_id":"SEA-8K-0001193125-24-011295","evidence_tier":"incident_disclosure","title":"Microsoft Corp discloses a cybersecurity incident with data taken without authorization (SEC 8-K, January 2024)","summary":"On January 12, 2024, Microsoft (the “Company” or “we”) detected that beginning in late November 2023, a nation-state associated threat actor had gained access to and exfiltrated information from a very small percentage…","organization":"Microsoft Corp","incident_date":"2024-01-19","date_basis":"disclosure","source_type":"regulator_report","source_title":"Microsoft Corp, Form 8-K (Item 1.05), filed 2024-01-19","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/789019/000119312524011295/d708866d8k.htm","failure_patterns":"SEA-FM-009","capabilities":"auth.destructive_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001193125-24-011295"}
{"incident_id":"SEA-8K-0001193125-24-033753","evidence_tier":"incident_disclosure","title":"Prudential Financial Inc discloses a cybersecurity incident (SEC 8-K, February 2024)","summary":"On February 5, 2024, Prudential Financial, Inc. (the “Company” or “we”) detected that, beginning February 4, 2024, a threat actor had gained unauthorized access to certain of our systems.","organization":"Prudential Financial Inc","incident_date":"2024-02-13","date_basis":"disclosure","source_type":"regulator_report","source_title":"Prudential Financial Inc, Form 8-K (Item 1.05), filed 2024-02-13","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1137774/000119312524033753/d770643d8k.htm","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001193125-24-033753"}
{"incident_id":"SEA-8K-0001193125-24-094797","evidence_tier":"incident_disclosure","title":"Orasure Technologies Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, April 2024)","summary":"On or about March 27, 2024, OraSure Technologies, Inc. (the “Company”) became aware of a cybersecurity incident in which an unauthorized third party gained access to Company data from certain information systems.","organization":"Orasure Technologies Inc","incident_date":"2024-04-12","date_basis":"disclosure","source_type":"regulator_report","source_title":"Orasure Technologies Inc, Form 8-K (Item 1.05), filed 2024-04-12","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1116463/000119312524094797/d825009d8k.htm","failure_patterns":"SEA-FM-009","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001193125-24-094797"}
{"incident_id":"SEA-8K-0001193125-24-100764","evidence_tier":"incident_disclosure","title":"Frontier Communications Parent, Inc. discloses a cybersecurity incident (SEC 8-K, April 2024)","summary":"On April 14, 2024, Frontier Communications Parent, Inc. (the “Company”) detected that a third party had gained unauthorized access to portions of its information technology environment.","organization":"Frontier Communications Parent, Inc.","incident_date":"2024-04-18","date_basis":"disclosure","source_type":"regulator_report","source_title":"Frontier Communications Parent, Inc., Form 8-K (Item 1.05), filed 2024-04-18","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/20520/000119312524100764/d784189d8k.htm","failure_patterns":"SEA-FM-014","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001193125-24-100764"}
{"incident_id":"SEA-8K-0001193125-24-133132","evidence_tier":"incident_disclosure","title":"Brandywine Realty Trust discloses a cybersecurity incident with data taken without authorization (SEC 8-K, May 2024)","summary":"On May 1, 2024, Brandywine Realty Trust (the “Company”) detected what was determined to be a cybersecurity incident, whereby a third party gained unauthorized access to portions of its information technology (“IT”)…","organization":"Brandywine Realty Trust","incident_date":"2024-05-07","date_basis":"disclosure","source_type":"regulator_report","source_title":"Brandywine Realty Trust, Form 8-K (Item 1.05), filed 2024-05-07","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/790816/000119312524133132/d824906d8k.htm","failure_patterns":"SEA-FM-014;SEA-FM-009","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001193125-24-133132"}
{"incident_id":"SEA-8K-0001193125-25-119311","evidence_tier":"incident_disclosure","title":"Nucor Corp discloses a cybersecurity incident (SEC 8-K, May 2025)","summary":"Nucor Corporation (the “Company”) recently identified a cybersecurity incident involving unauthorized third party access to certain information technology systems used by the Company.","organization":"Nucor Corp","incident_date":"2025-05-14","date_basis":"disclosure","source_type":"regulator_report","source_title":"Nucor Corp, Form 8-K (Item 1.05), filed 2025-05-14","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/73309/000119312525119311/d795264d8k.htm","failure_patterns":"","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001193125-25-119311"}
{"incident_id":"SEA-8K-0001193125-26-147772","evidence_tier":"incident_disclosure","title":"Bitcoin Depot Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, April 2026)","summary":"On March 23, 2026, Bitcoin Depot Inc. (the “Company”) discovered that an unauthorized party gained access to certain of its information technology systems.","organization":"Bitcoin Depot Inc.","incident_date":"2026-04-08","date_basis":"disclosure","source_type":"regulator_report","source_title":"Bitcoin Depot Inc., Form 8-K (Item 1.05), filed 2026-04-08","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1901799/000119312526147772/btm-20260406.htm","failure_patterns":"SEA-FM-012;SEA-FM-009","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001193125-26-147772"}
{"incident_id":"SEA-8K-0001193125-26-282946","evidence_tier":"incident_disclosure","title":"River Financial Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, June 2026)","summary":"On or about June 16, 2026, an unauthorized threat actor gained access to the network environment of River Financial Corporation, including River Bank & Trust (together, “River”).","organization":"River Financial Corp","incident_date":"2026-06-25","date_basis":"disclosure","source_type":"regulator_report","source_title":"River Financial Corp, Form 8-K (Item 1.05), filed 2026-06-25","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1641601/000119312526282946/ck0001641601-20260619.htm","failure_patterns":"SEA-FM-014;SEA-FM-009","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001193125-26-282946"}
{"incident_id":"SEA-8K-0001213900-24-031252","evidence_tier":"incident_disclosure","title":"B. Riley Financial, Inc. discloses a cybersecurity incident (SEC 8-K, April 2024)","summary":"Riley Financial, Inc. (the “Company”), discovered that a threat actor gained unauthorized access to certain of Targus’ file systems.","organization":"B. Riley Financial, Inc.","incident_date":"2024-04-08","date_basis":"disclosure","source_type":"regulator_report","source_title":"B. Riley Financial, Inc., Form 8-K (Item 1.05), filed 2024-04-08","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1464790/000121390024031252/ea0203500-8k_briley.htm","failure_patterns":"SEA-FM-014","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001213900-24-031252"}
{"incident_id":"SEA-8K-0001213900-24-099394","evidence_tier":"incident_disclosure","title":"iLearningEngines, Inc. discloses a cybersecurity incident (SEC 8-K, November 2024)","summary":"iLearningEngines, Inc. (the “ Company ”) recently became aware of a cybersecurity incident.","organization":"iLearningEngines, Inc.","incident_date":"2024-11-18","date_basis":"disclosure","source_type":"regulator_report","source_title":"iLearningEngines, Inc., Form 8-K (Item 1.05), filed 2024-11-18","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1835972/000121390024099394/ea0221424-8k_ilearning.htm","failure_patterns":"SEA-FM-005","capabilities":"auth.financial_action;auth.destructive_action;auth.public_publication;data.pii;data.financial_records","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001213900-24-099394"}
{"incident_id":"SEA-8K-0001213900-25-054319","evidence_tier":"incident_disclosure","title":"Zoomcar Holdings, Inc. discloses a cybersecurity incident (SEC 8-K, June 2025)","summary":"On June 9, 2025, Zoomcar Holdings, Inc. (the “Company”) identified a cybersecurity incident involving unauthorized access to its information systems.","organization":"Zoomcar Holdings, Inc.","incident_date":"2025-06-13","date_basis":"disclosure","source_type":"regulator_report","source_title":"Zoomcar Holdings, Inc., Form 8-K (Item 1.05), filed 2025-06-13","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1854275/000121390025054319/ea0245724-8k_zoomcar.htm","failure_patterns":"SEA-FM-012;SEA-FM-014","capabilities":"data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001213900-25-054319"}
{"incident_id":"SEA-8K-0001388658-26-000055","evidence_tier":"incident_disclosure","title":"iRhythm Holdings, Inc. discloses a cybersecurity incident involving social engineering (SEC 8-K, June 2026)","summary":"On June 8, 2026, iRhythm Holdings, Inc. (the “Company”) identified unauthorized activity involving data maintained on certain third-party-hosted business applications.","organization":"iRhythm Holdings, Inc.","incident_date":"2026-06-15","date_basis":"disclosure","source_type":"regulator_report","source_title":"iRhythm Holdings, Inc., Form 8-K (Item 1.05), filed 2026-06-15","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1388658/000138865826000055/irtc-20260610.htm","failure_patterns":"SEA-FM-012;SEA-FM-009","capabilities":"auth.financial_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001388658-26-000055"}
{"incident_id":"SEA-8K-0001437749-24-022743","evidence_tier":"incident_disclosure","title":"Bassett Furniture Industries Inc discloses a cybersecurity incident (SEC 8-K, July 2024)","summary":"On July 10, 2024, Bassett Furniture Industries, Incorporated (the “Company”) detected unauthorized occurrences on a portion of its information technology (IT) systems.","organization":"Bassett Furniture Industries Inc","incident_date":"2024-07-15","date_basis":"disclosure","source_type":"regulator_report","source_title":"Bassett Furniture Industries Inc, Form 8-K (Item 1.05), filed 2024-07-15","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/10329/000143774924022743/bset20240715_8k.htm","failure_patterns":"SEA-FM-014","capabilities":"auth.financial_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001437749-24-022743"}
{"incident_id":"SEA-8K-0001437749-25-006475","evidence_tier":"incident_disclosure","title":"National Presto Industries Inc discloses a cybersecurity incident (SEC 8-K, March 2025)","summary":"On March 1, 2025, the Registrant experienced a system outage caused by a cybersecurity incident.","organization":"National Presto Industries Inc","incident_date":"2025-03-06","date_basis":"disclosure","source_type":"regulator_report","source_title":"National Presto Industries Inc, Form 8-K (Item 1.05), filed 2025-03-06","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/80172/000143774925006475/npk20250306_8k.htm","failure_patterns":"","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001437749-25-006475"}
{"incident_id":"SEA-8K-0001437749-26-009193","evidence_tier":"incident_disclosure","title":"Trio-tech International discloses a cybersecurity incident involving ransomware (SEC 8-K, March 2026)","summary":"On March 11, 2026, Trio-Tech International (“Company”) identified and responded to a cybersecurity incident in one of its subsidiaries (“subsidiary”) in Singapore.","organization":"Trio-tech International","incident_date":"2026-03-20","date_basis":"disclosure","source_type":"regulator_report","source_title":"Trio-tech International, Form 8-K (Item 1.05), filed 2026-03-20","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/732026/000143774926009193/trt20260320_8k.htm","failure_patterns":"SEA-FM-014","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001437749-26-009193"}
{"incident_id":"SEA-8K-0001467623-24-000024","evidence_tier":"incident_disclosure","title":"Dropbox, Inc. discloses a cybersecurity incident (SEC 8-K, May 2024)","summary":"On April 24, 2024, Dropbox, Inc. (“ Dropbox ” or “ we ”) became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment.","organization":"Dropbox, Inc.","incident_date":"2024-05-01","date_basis":"disclosure","source_type":"regulator_report","source_title":"Dropbox, Inc., Form 8-K (Item 1.05), filed 2024-05-01","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1467623/000146762324000024/dbx-20240429.htm","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001467623-24-000024"}
{"incident_id":"SEA-8K-0001477294-25-000047","evidence_tier":"incident_disclosure","title":"Sensata Technologies Holding plc discloses a cybersecurity incident involving ransomware (SEC 8-K, April 2025)","summary":"On April 6, 2025, Sensata Technologies Holding plc (the “Company”) experienced a ransomware incident that has encrypted certain devices in the Company’s network.","organization":"Sensata Technologies Holding plc","incident_date":"2025-04-09","date_basis":"disclosure","source_type":"regulator_report","source_title":"Sensata Technologies Holding plc, Form 8-K (Item 1.05), filed 2025-04-09","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1477294/000147729425000047/st-20250406.htm","failure_patterns":"SEA-FM-014","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001477294-25-000047"}
{"incident_id":"SEA-8K-0001493152-26-013239","evidence_tier":"incident_disclosure","title":"CareCloud, Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, March 2026)","summary":"On March 16, 2026, CareCloud, Inc. (the “Company”) experienced a temporary network disruption in its CareCloud Health division that partially impacted the functionality and data access to 1 of its 6 electronic health…","organization":"CareCloud, Inc.","incident_date":"2026-03-27","date_basis":"disclosure","source_type":"regulator_report","source_title":"CareCloud, Inc., Form 8-K (Item 1.05), filed 2026-03-27","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1582982/000149315226013239/form8-k.htm","failure_patterns":"SEA-FM-014;SEA-FM-009","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001493152-26-013239"}
{"incident_id":"SEA-8K-0001562151-24-000032","evidence_tier":"incident_disclosure","title":"Crimson Wine Group, Ltd discloses a cybersecurity incident with data taken without authorization (SEC 8-K, July 2024)","summary":"As previously disclosed on the Current Report on Form 8-K filed by Crimson Wine Group, Ltd. (the “Company”) on July 5, 2024 (the “Initial Report”), on June 30, 2024, the Company detected a cybersecurity incident in which…","organization":"Crimson Wine Group, Ltd","incident_date":"2024-07-25","date_basis":"disclosure","source_type":"regulator_report","source_title":"Crimson Wine Group, Ltd, Form 8-K (Item 1.05), filed 2024-07-25","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1562151/000156215124000032/cwgl-20240725.htm","failure_patterns":"SEA-FM-014;SEA-FM-009","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001562151-24-000032"}
{"incident_id":"SEA-8K-0001605301-26-000021","evidence_tier":"incident_disclosure","title":"CB Financial Services, Inc. discloses a cybersecurity incident (SEC 8-K, May 2026)","summary":"On May 5, 2026, Community Bank (the “Bank”), the wholly-owned subsidiary of CB Financial Services, Inc. (the “Company”), became aware of an internal incident involving the handling of certain non public customer…","organization":"CB Financial Services, Inc.","incident_date":"2026-05-11","date_basis":"disclosure","source_type":"regulator_report","source_title":"CB Financial Services, Inc., Form 8-K (Item 1.05), filed 2026-05-11","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1605301/000160530126000021/cbfv-20260507.htm","failure_patterns":"SEA-FM-014","capabilities":"auth.financial_action;auth.privileged_action;auth.public_publication;data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001605301-26-000021"}
{"incident_id":"SEA-8K-0001628280-25-005855","evidence_tier":"incident_disclosure","title":"LEE ENTERPRISES, Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, February 2025)","summary":"On February 3, 2025, Lee Enterprises, Inc. (\"Lee\" or the \"Company\") experienced a systems outage caused by a cybersecurity attack.","organization":"LEE ENTERPRISES, Inc","incident_date":"2025-02-18","date_basis":"disclosure","source_type":"regulator_report","source_title":"LEE ENTERPRISES, Inc, Form 8-K (Item 1.05), filed 2025-02-18","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/58361/000162828025005855/lee-20250212.htm","failure_patterns":"SEA-FM-014;SEA-FM-009","capabilities":"auth.financial_action;data.pii;arch.distributed_tx","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001628280-25-005855"}
{"incident_id":"SEA-8K-0001628280-26-011152","evidence_tier":"incident_disclosure","title":"Ufp Technologies Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, February 2026)","summary":"On or about February 14, 2026, UFP Technologies, Inc. (the “Company”) detected suspicious activity involving its information technology (“IT”) systems.","organization":"Ufp Technologies Inc","incident_date":"2026-02-24","date_basis":"disclosure","source_type":"regulator_report","source_title":"Ufp Technologies Inc, Form 8-K (Item 1.05), filed 2026-02-24","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/914156/000162828026011152/ufpt-20260219.htm","failure_patterns":"SEA-FM-009","capabilities":"auth.financial_action;auth.destructive_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001628280-26-011152"}
{"incident_id":"SEA-8K-0001628280-26-059602","evidence_tier":"incident_disclosure","title":"Nutex Health Inc. discloses a cybersecurity incident with data taken without authorization (SEC 8-K, August 2026)","summary":"As disclosed in Item 8.01 of a Current Report on Form 8-K filed with the Securities and Exchange Commission on August 24, 2026 (the “Prior 8-K”), Nutex Health Inc.","organization":"Nutex Health Inc.","incident_date":"2026-08-31","date_basis":"disclosure","source_type":"regulator_report","source_title":"Nutex Health Inc., Form 8-K (Item 1.05), filed 2026-08-31","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1479681/000162828026059602/nutx-20260831.htm","failure_patterns":"SEA-FM-012;SEA-FM-009","capabilities":"auth.financial_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001628280-26-059602"}
{"incident_id":"SEA-8K-0001645590-24-000009","evidence_tier":"incident_disclosure","title":"Hewlett Packard Enterprise Co discloses a cybersecurity incident with data taken without authorization (SEC 8-K, January 2024)","summary":"On December 12, 2023, Hewlett Packard Enterprise Company (the “Company,” “HPE,” or “we”) was notified that a suspected nation-state actor, believed to be the threat actor Midnight Blizzard, the state-sponsored actor also…","organization":"Hewlett Packard Enterprise Co","incident_date":"2024-01-24","date_basis":"disclosure","source_type":"regulator_report","source_title":"Hewlett Packard Enterprise Co, Form 8-K (Item 1.05), filed 2024-01-24","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1645590/000164559024000009/hpe-20240119.htm","failure_patterns":"SEA-FM-009","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001645590-24-000009"}
{"incident_id":"SEA-8K-0001649739-25-000246","evidence_tier":"incident_disclosure","title":"BayFirst Financial Corp. discloses a cybersecurity incident (SEC 8-K, October 2025)","summary":"Cybersecurity Incidents On August 14, 2025, BayFirst National Bank (“BayFirst”) was notified of a cybersecurity incident experienced by a third-party provider of marketing services.","organization":"BayFirst Financial Corp.","incident_date":"2025-10-30","date_basis":"disclosure","source_type":"regulator_report","source_title":"BayFirst Financial Corp., Form 8-K (Item 1.05), filed 2025-10-30","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1649739/000164973925000246/bafn-20251028.htm","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001649739-25-000246"}
{"incident_id":"SEA-8K-0001654954-24-002505","evidence_tier":"incident_disclosure","title":"Federal Home Loan Bank of New York discloses a cybersecurity incident (SEC 8-K, March 2024)","summary":"On February 21, 2024, the Federal Home Loan Bank of New York (“Bank”), through its operational controls, detected unknown persons attempting to fraudulently obtain funds from the Bank (the “incident”).","organization":"Federal Home Loan Bank of New York","incident_date":"2024-03-01","date_basis":"disclosure","source_type":"regulator_report","source_title":"Federal Home Loan Bank of New York, Form 8-K (Item 1.05), filed 2024-03-01","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1329842/000165495424002505/fhlbny_8k.htm","failure_patterns":"","capabilities":"auth.financial_action;data.financial_records","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001654954-24-002505"}
{"incident_id":"SEA-8K-0001654954-24-015098","evidence_tier":"incident_disclosure","title":"Englobal Corp discloses a cybersecurity incident (SEC 8-K, December 2024)","summary":"On November 25, 2024, ENGlobal Corporation (the “Company”) became aware of a cybersecurity incident.","organization":"Englobal Corp","incident_date":"2024-12-02","date_basis":"disclosure","source_type":"regulator_report","source_title":"Englobal Corp, Form 8-K (Item 1.05), filed 2024-12-02","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/933738/000165495424015098/eng_8k.htm","failure_patterns":"SEA-FM-014","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001654954-24-015098"}
{"incident_id":"SEA-8K-0001654954-25-009925","evidence_tier":"incident_disclosure","title":"Data I/O Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, August 2025)","summary":"On August 16, 2025, Data I/O Corporation (the “Company”) experienced a ransomware incident (the “Incident”) on certain of its internal IT systems.","organization":"Data I/O Corp","incident_date":"2025-08-21","date_basis":"disclosure","source_type":"regulator_report","source_title":"Data I/O Corp, Form 8-K (Item 1.05), filed 2025-08-21","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/351998/000165495425009925/daio_8k.htm","failure_patterns":"SEA-FM-014","capabilities":"data.regulated_records","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001654954-25-009925"}
{"incident_id":"SEA-8K-0001654954-25-010613","evidence_tier":"incident_disclosure","title":"Data I/O Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, September 2025)","summary":"As previously disclosed on August 21, 2025 in a Current Report on Form 8-K filed with the Securities and Exchange Commission (“SEC”), on August 16, 2025, Data I/O Corporation (the “Company”) experienced a ransomware…","organization":"Data I/O Corp","incident_date":"2025-09-10","date_basis":"disclosure","source_type":"regulator_report","source_title":"Data I/O Corp, Form 8-K (Item 1.05), filed 2025-09-10","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/351998/000165495425010613/daio_8k.htm","failure_patterns":"SEA-FM-014;SEA-FM-013","capabilities":"data.credentials_secrets;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001654954-25-010613"}
{"incident_id":"SEA-8K-0001677703-25-000067","evidence_tier":"incident_disclosure","title":"CONDUENT Inc discloses a cybersecurity incident with data taken without authorization (SEC 8-K, April 2025)","summary":"On January 13, 2025, Conduent Incorporated (the \"Company\") experienced an operational disruption and learned that a ‘threat actor’ gained unauthorized access to a limited portion of the Company’s environment.","organization":"CONDUENT Inc","incident_date":"2025-04-14","date_basis":"disclosure","source_type":"regulator_report","source_title":"CONDUENT Inc, Form 8-K (Item 1.05), filed 2025-04-14","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1677703/000167770325000067/cndt-20250409.htm","failure_patterns":"SEA-FM-014;SEA-FM-009","capabilities":"data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001677703-25-000067"}
{"incident_id":"SEA-8K-0001679788-25-000094","evidence_tier":"incident_disclosure","title":"Coinbase Global, Inc. discloses a cybersecurity incident (SEC 8-K, May 2025)","summary":"On May 11, 2025, Coinbase, Inc., a subsidiary of Coinbase Global, Inc. (“Coinbase” or the “Company”), received an email communication from an unknown threat actor claiming to have obtained information about certain…","organization":"Coinbase Global, Inc.","incident_date":"2025-05-15","date_basis":"disclosure","source_type":"regulator_report","source_title":"Coinbase Global, Inc., Form 8-K (Item 1.05), filed 2025-05-15","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;auth.destructive_action;auth.infrastructure_modification;data.pii;data.financial_records;data.credentials_secrets;data.uploaded_files;arch.event_driven;arch.tool_enabled_agent","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001679788-25-000094"}
{"incident_id":"SEA-8K-0001683168-25-006583","evidence_tier":"incident_disclosure","title":"Wytec International Inc discloses a cybersecurity incident (SEC 8-K, August 2025)","summary":"On August 25, 2025 , Wytec International, Inc. (the “Company”) became aware of a cybersecurity incident in which a bad actor published a defaced website at the Company’s web address, wytecintl.com.","organization":"Wytec International Inc","incident_date":"2025-08-29","date_basis":"disclosure","source_type":"regulator_report","source_title":"Wytec International Inc, Form 8-K (Item 1.05), filed 2025-08-29","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1560143/000168316825006583/wytec_8k.htm","failure_patterns":"","capabilities":"","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001683168-25-006583"}
{"incident_id":"SEA-8K-0001834584-25-000196","evidence_tier":"incident_disclosure","title":"Coupang, Inc. discloses a cybersecurity incident (SEC 8-K, December 2025)","summary":"On November 18, 2025, Coupang Corp. (“Coupang Corp.”), a wholly-owned Korean subsidiary of Coupang, Inc. (Coupang Corp., together with Coupang, Inc.","organization":"Coupang, Inc.","incident_date":"2025-12-16","date_basis":"disclosure","source_type":"regulator_report","source_title":"Coupang, Inc., Form 8-K (Item 1.05), filed 2025-12-16","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1834584/000183458425000196/cpng-20251215.htm","failure_patterns":"SEA-FM-012;SEA-FM-014","capabilities":"auth.financial_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001834584-25-000196"}
{"incident_id":"SEA-8K-0001857154-24-000123","evidence_tier":"incident_disclosure","title":"Krispy Kreme, Inc. discloses a cybersecurity incident (SEC 8-K, December 2024)","summary":"On November 29, 2024, Krispy Kreme, Inc. (the “Company”) was notified regarding unauthorized activity on a portion of its information technology systems.","organization":"Krispy Kreme, Inc.","incident_date":"2024-12-11","date_basis":"disclosure","source_type":"regulator_report","source_title":"Krispy Kreme, Inc., Form 8-K (Item 1.05), filed 2024-12-11","source_publisher":"U.S. SEC EDGAR, Form 8-K Item 1.05","source_url":"https://www.sec.gov/Archives/edgar/data/1857154/000185715424000123/dnut-20241211.htm","failure_patterns":"SEA-FM-014","capabilities":"auth.financial_action","is_ai_system":false,"is_agentic":false,"safeguards":"","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-8K-0001857154-24-000123"}
{"incident_id":"SEA-AI-001","evidence_tier":"documented_incident","title":"AI coding agent deletes a live production database during a code freeze (Replit, 2025)","summary":"An AI coding agent deleted a live production database that held data on more than 1,200 executives and over 1,190 companies.","organization":"Replit","incident_date":"2025-07-23","date_basis":"publication","source_type":"verified_journalism","source_title":"An AI-powered coding tool wiped out a software company's database in 'catastrophic failure'","source_publisher":"Fortune","source_url":"https://fortune.com/2025/07/23/ai-coding-tool-replit-wiped-database-called-it-a-catastrophic-failure","failure_patterns":"SEA-FM-010;SEA-FM-002;SEA-FM-005","capabilities":"arch.tool_enabled_agent;auth.code_execution;auth.destructive_action;fail.irreversible_change;auth.autonomous_approval","is_ai_system":true,"is_agentic":true,"safeguards":"Separate development and production and enforce freezes in code: An instruction to stop must be a hard permission boundary the agent cannot cross, not a prompt. | Require approval and verified rollback for destructive actions: Gate destructive commands behind human approval and keep one-click restore points.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-AI-001"}
{"incident_id":"SEA-AI-002","evidence_tier":"documented_incident","title":"Malicious code committed to the Amazon Q Developer VS Code extension via a compromised token (AWS, 2025)","summary":"Malicious code was committed to the extension's open-source repository using a compromised GitHub token in a build configuration.","organization":"Amazon Web Services","incident_date":"2025-07-23","date_basis":"publication","source_type":"vendor_postmortem","source_title":"Security Update for Amazon Q Developer Extension for Visual Studio Code (Version 1.84)","source_publisher":"Amazon Web Services","source_url":"https://aws.amazon.com/security/security-bulletins/AWS-2025-015/","failure_patterns":"SEA-FM-012;SEA-FM-002","capabilities":"data.credentials_secrets;auth.code_execution;fail.auth_boundary_failure","is_ai_system":true,"is_agentic":false,"safeguards":"Protect build credentials and require review for releases: Keep repository tokens out of build configuration and require reviewed, protected branches for release code. | Verify release contents before publishing: Diff release artifacts against reviewed source and scan for unexpected instructions or scripts.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-AI-002"}
{"incident_id":"SEA-AI-003","evidence_tier":"documented_incident","title":"Prompt injection in a public GitHub issue makes an MCP-connected agent leak private repository data (2025)","summary":"Invariant Labs showed that a malicious instruction placed in an issue on a public repository could be read by an agent connected through the GitHub MCP server.","organization":"GitHub MCP users","incident_date":"2025-05-26","date_basis":"publication","source_type":"vendor_postmortem","source_title":"GitHub MCP Exploited: Accessing private repositories via MCP","source_publisher":"Invariant Labs","source_url":"https://invariantlabs.ai/blog/mcp-github-vulnerability","failure_patterns":"SEA-FM-004;SEA-FM-010;SEA-FM-002","capabilities":"arch.tool_enabled_agent;data.untrusted_external_text;data.credentials_secrets;auth.external_communication","is_ai_system":true,"is_agentic":true,"safeguards":"Scope agent credentials per task and repository: Grant tokens only for the repositories the current task needs so injected instructions cannot reach private data. | Separate untrusted content from instructions and review tool calls: Treat issue text as data, and require confirmation before an agent reads from one trust domain and writes to another.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-AI-003"}
{"incident_id":"SEA-AI-004","evidence_tier":"documented_incident","title":"Hidden instructions in a support ticket make an MCP-connected assistant expose private SQL tables (Supabase MCP, 2025)","summary":"General Analysis showed that hidden instructions in a customer support ticket could make a developer's MCP-connected assistant query a private table of integration tokens.","organization":"Supabase MCP users","incident_date":"2025-07-08","date_basis":"publication","source_type":"vendor_postmortem","source_title":"Supabase MCP can leak your private SQL tables","source_publisher":"General Analysis","source_url":"https://www.generalanalysis.com/blog/supabase-mcp-blog","failure_patterns":"SEA-FM-004;SEA-FM-002","capabilities":"arch.tool_enabled_agent;data.untrusted_external_text;data.credentials_secrets;auth.privileged_action","is_ai_system":true,"is_agentic":true,"safeguards":"Give agents least-privilege, read-only database roles: Do not hand an assistant a role that bypasses row-level security; scope it to the tables the task needs. | Keep untrusted ticket text away from privileged tool use: Require human approval when a model acting on user-submitted text tries to read sensitive tables.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-AI-004"}
{"incident_id":"SEA-AI-005","evidence_tier":"documented_incident","title":"EchoLeak: zero-click prompt injection lets a crafted email exfiltrate Microsoft 365 Copilot data (2025)","summary":"EchoLeak (CVE-2025-32711, CVSS 9.3) is a zero-click vulnerability in Microsoft 365 Copilot in which a crafted email could trigger indirect prompt injection.","organization":"Microsoft","incident_date":"2025-06-12","date_basis":"publication","source_type":"verified_journalism","source_title":"Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data (EchoLeak, CVE-2025-32711)","source_publisher":"The Hacker News","source_url":"https://thehackernews.com/2025/06/zero-click-ai-vulnerability-exposes.html","failure_patterns":"SEA-FM-004;SEA-FM-010","capabilities":"arch.content_ingestion_rag;data.untrusted_external_text;arch.tool_enabled_agent;data.pii","is_ai_system":true,"is_agentic":true,"safeguards":"Isolate retrieved untrusted content from privileged context: Do not let external email text share a context window with sensitive data without strict separation and output controls. | Block auto-fetched external resources in model output: Strip or allow-list links and images in generated output so data cannot be smuggled out in requests.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-AI-005"}
{"incident_id":"SEA-AI-006","evidence_tier":"documented_incident","title":"Airline held liable when its website chatbot gave wrong bereavement-fare advice (Moffatt v. Air Canada, 2024)","summary":"A customer relied on Air Canada's website chatbot, which told him he could apply for a bereavement fare retroactively; the airline's policy did not allow that.","organization":"Air Canada","incident_date":"2024-02-14","date_basis":"disclosure","source_type":"court_filing","source_title":"Moffatt v. Air Canada, 2024 BCCRT 149","source_publisher":"British Columbia Civil Resolution Tribunal","source_url":"https://decisions.civilresolutionbc.ca/crt/crtd/en/525448/1/document.do","failure_patterns":"SEA-FM-010;SEA-FM-002","capabilities":"auth.external_communication;auth.financial_action;fail.unsafe_fallback","is_ai_system":true,"is_agentic":false,"safeguards":"Ground policy answers in the authoritative policy source: Answer refund and eligibility questions from current policy text and link to it instead of free-form generation. | Treat chatbot statements as company statements: Constrain what the assistant may promise, add disclaimers that cannot substitute for accuracy, and review high-stakes answers.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-AI-006"}
{"incident_id":"SEA-AI-007","evidence_tier":"documented_incident","title":"Prompt injection makes GitHub Copilot turn off its own confirmations and run commands (CVE-2025-53773)","summary":"Instructions planted in content the agent reads could make GitHub Copilot write \"chat.tools.autoApprove\": true into the project's .vscode/settings.json, which turns off all user confirmations.","organization":"GitHub Copilot users","incident_date":"2025-08-12","date_basis":"publication","source_type":"academic_research","source_title":"GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)","source_publisher":"Embrace The Red (Johann Rehberger)","source_url":"https://embracethered.com/blog/posts/2025/github-copilot-remote-code-execution-via-prompt-injection/","failure_patterns":"SEA-FM-004;SEA-FM-010;SEA-FM-002","capabilities":"arch.tool_enabled_agent;data.untrusted_external_text;auth.code_execution;auth.privileged_action","is_ai_system":true,"is_agentic":true,"safeguards":"Never let an agent change its own permissions: Protect agent configuration and security settings from the agent's file-writing tools, and require a human to change approval modes. | Treat repository content as untrusted input: Content the agent reads must not be able to trigger tool calls without the same confirmation as any other risky action.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-AI-007"}
{"incident_id":"SEA-AI-008","evidence_tier":"documented_incident","title":"Prompt injection in a README plus weak allow-list matching lets Gemini CLI silently run attacker commands (2025)","summary":"Researchers hid a prompt injection inside a README.md (in the text of a software license) so that Gemini CLI, asked only to inspect a codebase, would request shell commands.","organization":"Google Gemini CLI users","incident_date":"2025-07-28","date_basis":"publication","source_type":"academic_research","source_title":"Code Execution Through Deception: Gemini AI CLI Hijack","source_publisher":"Tracebit","source_url":"https://tracebit.com/blog/code-exec-deception-gemini-ai-cli-hijack","failure_patterns":"SEA-FM-004;SEA-FM-010","capabilities":"arch.tool_enabled_agent;data.untrusted_external_text;auth.code_execution;data.credentials_secrets","is_ai_system":true,"is_agentic":true,"safeguards":"Match allow-listed commands exactly: Parse the full command, including chained and piped commands, before treating it as pre-approved. | Show the user exactly what will run: Display the complete command text for any execution request and never hide output that an agent produced from untrusted content.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-AI-008"}
{"incident_id":"SEA-AI-009","evidence_tier":"documented_incident","title":"Default password and an IDOR in McDonald's AI hiring chatbot platform expose data on 64 million applicants (2025)","summary":"McHire, the chatbot recruiting platform used by most McDonald's franchisees, lets applicants chat with a bot named Olivia, built by Paradox.ai, that collects personal information.","organization":"Paradox.ai (McHire)","incident_date":"2025-07-01","date_basis":"disclosure","source_type":"academic_research","source_title":"Would you like an IDOR with that? Leaking 64 million McDonald's job applications","source_publisher":"Ian Carroll and Sam Curry","source_url":"https://ian.sh/mcdonalds","failure_patterns":"SEA-FM-003;SEA-FM-012","capabilities":"data.pii;arch.multi_tenant;auth.privileged_action;fail.auth_boundary_failure;fail.cross_tenant_leak","is_ai_system":true,"is_agentic":false,"safeguards":"Remove default and test accounts before production: Block default credentials, require MFA for administrative interfaces and audit for dormant test accounts. | Authorize every object access on the server: Check that the caller may access the specific record requested, not only that the caller is signed in.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-AI-009"}
{"incident_id":"SEA-AI-010","evidence_tier":"documented_incident","title":"Non-secret app ID lets anyone register for private apps built on the Base44 AI app builder (2025)","summary":"By supplying only an application's non-secret appid to undocumented registration and email-verification endpoints, an attacker could create a verified account on private applications built with Base44.","organization":"Base44 (Wix)","incident_date":"2025-07-09","date_basis":"disclosure","source_type":"academic_research","source_title":"Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding Platform Base44","source_publisher":"Wiz Research","source_url":"https://www.wiz.io/blog/critical-vulnerability-base44","failure_patterns":"SEA-FM-003","capabilities":"arch.multi_tenant;data.pii;fail.auth_boundary_failure;data.cross_tenant_data","is_ai_system":true,"is_agentic":false,"safeguards":"Never use an identifier as an authorization check: An app or tenant id says which resource is meant, not that the caller may access it; enforce each app's access policy on every endpoint. | Inventory and protect undocumented endpoints: Apply the same authentication and privacy checks to internal or undocumented APIs as to the documented sign-in flow.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-AI-010"}
{"incident_id":"SEA-CISA-2012-1854","evidence_tier":"security_advisory","title":"Security issue reported in Visual Basic for Applications (VBA)","summary":"Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution.","organization":"Microsoft","incident_date":"2026-04-13","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2012-1854","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2012-1854"}
{"incident_id":"SEA-CISA-2015-3246","evidence_tier":"security_advisory","title":"Libuser issue could cause actions to run with inconsistent state","summary":"Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation.","organization":"Red Hat","incident_date":"2026-08-26","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://access.redhat.com/articles/1537873","failure_patterns":"SEA-FM-004","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2015-3246","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2015-3246"}
{"incident_id":"SEA-CISA-2015-5287","evidence_tier":"security_advisory","title":"Automatic Bug Reporting Tool issue could grant elevated privileges","summary":"Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name.","organization":"Red Hat","incident_date":"2026-08-26","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e","failure_patterns":"SEA-FM-004","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2015-5287","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2015-5287"}
{"incident_id":"SEA-CISA-2015-5477","evidence_tier":"security_advisory","title":"Security issue reported in BIND","summary":"ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.","organization":"ISC","incident_date":"2026-10-08","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2015-5477","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2015-5477"}
{"incident_id":"SEA-CISA-2019-1068","evidence_tier":"security_advisory","title":"SQL Server issue could allow unintended commands to run","summary":"Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.","organization":"Microsoft","incident_date":"2026-08-26","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft SQL Server Remote Code Execution Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068","failure_patterns":"SEA-FM-004","capabilities":"auth.code_execution;auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2019-1068","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2019-1068"}
{"incident_id":"SEA-CISA-2021-22054","evidence_tier":"security_advisory","title":"Workspace One UEM issue could reach internal services","summary":"Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with network access to UEM to send their requests…","organization":"Omnissa","incident_date":"2026-03-09","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://web.archive.org/web/20211222154335/https://www.vmware.com/security/advisories/VMSA-2021-0029.html","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2021-22054","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2021-22054"}
{"incident_id":"SEA-CISA-2021-23758","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes.","organization":"Ajax.NET Professional","incident_date":"2026-08-26","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57","failure_patterns":"SEA-FM-004","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2021-23758","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2021-23758"}
{"incident_id":"SEA-CISA-2021-3199","evidence_tier":"security_advisory","title":"Docs issue could expose restricted files","summary":"ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.","organization":"ONLYOFFICE","incident_date":"2026-10-08","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563","failure_patterns":"SEA-FM-004","capabilities":"data.credentials_secrets;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2021-3199","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2021-3199"}
{"incident_id":"SEA-CISA-2022-0995","evidence_tier":"security_advisory","title":"Security issue reported in Kernel","summary":"Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.","organization":"Linux","incident_date":"2026-08-26","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2022-0995","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2022-0995"}
{"incident_id":"SEA-CISA-2023-21529","evidence_tier":"security_advisory","title":"Exchange Server issue could make the application process unsafe input","summary":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.","organization":"Microsoft","incident_date":"2026-04-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2023-21529","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2023-21529"}
{"incident_id":"SEA-CISA-2023-22894","evidence_tier":"security_advisory","title":"Security issue reported in Strapi","summary":"Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter.","organization":"Strapi","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Strapi Cleartext Storage of Sensitive Information Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2023-22894","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2023-22894"}
{"incident_id":"SEA-CISA-2024-57726","evidence_tier":"security_advisory","title":"Security issue reported in SimpleHelp","summary":"SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions.","organization":"SimpleHelp","incident_date":"2026-04-24","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2024-57726","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2024-57726"}
{"incident_id":"SEA-CISA-2024-57728","evidence_tier":"security_advisory","title":"SimpleHelp issue could expose restricted files","summary":"SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip).","organization":"SimpleHelp","incident_date":"2026-04-24","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2024-57728","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2024-57728"}
{"incident_id":"SEA-CISA-2024-7399","evidence_tier":"security_advisory","title":"MagicINFO 9 Server issue could expose restricted files","summary":"Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.","organization":"Samsung","incident_date":"2026-04-24","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://security.samsungtv.com/securityUpdates","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2024-7399","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2024-7399"}
{"incident_id":"SEA-CISA-2025-2749","evidence_tier":"security_advisory","title":"Kentico Xperience issue could expose restricted files","summary":"Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations.","organization":"Kentico","incident_date":"2026-04-20","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://devnet.kentico.com/download/hotfixes","failure_patterns":"SEA-FM-004","capabilities":"data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2025-2749","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2025-2749"}
{"incident_id":"SEA-CISA-2025-29635","evidence_tier":"security_advisory","title":"DIR-823X issue could allow unintended commands to run","summary":"D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/setprohibiting via the corresponding…","organization":"D-Link","incident_date":"2026-04-24","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10469","failure_patterns":"SEA-FM-004","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2025-29635","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2025-29635"}
{"incident_id":"SEA-CISA-2025-48595","evidence_tier":"security_advisory","title":"Security issue reported in Framework","summary":"Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.","organization":"Android","incident_date":"2026-06-02","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://source.android.com/docs/security/bulletin/2026/2026-06-01","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2025-48595","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2025-48595"}
{"incident_id":"SEA-CISA-2025-48700","evidence_tier":"security_advisory","title":"Zimbra Collaboration Suite (ZCS) issue could run attacker-controlled scripts in a browser","summary":"Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that could allow attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to…","organization":"Synacor","incident_date":"2026-04-20","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories","failure_patterns":"SEA-FM-004","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2025-48700","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2025-48700"}
{"incident_id":"SEA-CISA-2026-102489","evidence_tier":"security_advisory","title":"Security issue reported in Zammad","summary":"Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.","organization":"Zammad GmbH","incident_date":"2026-10-02","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://zammad.com/en/product/releases/","failure_patterns":"SEA-FM-004","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-102489","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-102489"}
{"incident_id":"SEA-CISA-2026-105133","evidence_tier":"security_advisory","title":"Security issue reported in AhsayCBS","summary":"Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function.","organization":"Ahsay","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Ahsay AhsayCBS Improper Authentication Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-105133","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-105133"}
{"incident_id":"SEA-CISA-2026-105134","evidence_tier":"security_advisory","title":"AhsayCBS issue could allow unintended commands to run","summary":"Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s…","organization":"Ahsay","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Ahsay AhsayCBS Command Injection Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-105134","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-105134"}
{"incident_id":"SEA-CISA-2026-15409","evidence_tier":"security_advisory","title":"SMA1000 Appliances issue could reach internal services","summary":"SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.","organization":"SonicWall","incident_date":"2026-07-14","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-15409","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-15409"}
{"incident_id":"SEA-CISA-2026-19490","evidence_tier":"security_advisory","title":"NetScaler issue could allow unauthorized access","summary":"Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel.","organization":"Citrix","incident_date":"2026-09-09","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-19490","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-19490"}
{"incident_id":"SEA-CISA-2026-20122","evidence_tier":"security_advisory","title":"Security issue reported in Catalyst SD-WAN Manger","summary":"Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system.","organization":"Cisco","incident_date":"2026-04-20","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","cve_references":"CVE-2026-20122","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-20122"}
{"incident_id":"SEA-CISA-2026-20230","evidence_tier":"security_advisory","title":"Unified Communications Manager issue could reach internal services","summary":"Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an…","organization":"Cisco","incident_date":"2026-06-25","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-20230","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-20230"}
{"incident_id":"SEA-CISA-2026-20253","evidence_tier":"security_advisory","title":"Security issue reported in Enterprise","summary":"Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.","organization":"Splunk","incident_date":"2026-06-18","date_basis":"","source_type":"cve_advisory","source_title":"Splunk Enterprise Missing Authentication for Critical Function Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://advisory.splunk.com/advisories/SVD-2026-0603","failure_patterns":"SEA-FM-005","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-20253","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-20253"}
{"incident_id":"SEA-CISA-2026-21643","evidence_tier":"security_advisory","title":"FortiClient EMS issue could expose or alter stored data","summary":"Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.","organization":"Fortinet","incident_date":"2026-04-13","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-1142","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2026-21643","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-21643"}
{"incident_id":"SEA-CISA-2026-21962","evidence_tier":"security_advisory","title":"HTTP Server and Oracle Weblogic Server Proxy Plug-in issue could allow unauthorized access","summary":"Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as…","organization":"Oracle","incident_date":"2026-08-24","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.oracle.com/security-alerts/cpujan2026.html","failure_patterns":"SEA-FM-005","capabilities":"auth.destructive_action;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-21962","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-21962"}
{"incident_id":"SEA-CISA-2026-25089","evidence_tier":"security_advisory","title":"FortiSandbox issue could allow unintended commands to run","summary":"Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP…","organization":"Fortinet","incident_date":"2026-07-16","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-141","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-25089","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-25089"}
{"incident_id":"SEA-CISA-2026-28318","evidence_tier":"security_advisory","title":"Security issue reported in Serv-U","summary":"SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication.","organization":"SolarWinds","incident_date":"2026-06-05","date_basis":"","source_type":"cve_advisory","source_title":"SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2026-28318","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-28318"}
{"incident_id":"SEA-CISA-2026-33634","evidence_tier":"security_advisory","title":"Security issue reported in Trivy","summary":"Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all tokens, SSH keys, cloud credentials, database…","organization":"Aquasecurity","incident_date":"2026-03-26","date_basis":"","source_type":"cve_advisory","source_title":"Aquasecurity Trivy Embedded Malicious Code Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://github.com/advisories/GHSA-69fq-xp46-6x23","failure_patterns":"SEA-FM-004","capabilities":"auth.code_execution;auth.privileged_action;auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2026-33634","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-33634"}
{"incident_id":"SEA-CISA-2026-33824","evidence_tier":"security_advisory","title":"Security issue reported in Internet Key Exchange (IKE) Service Extensions","summary":"Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable remote code execution.","organization":"Microsoft","incident_date":"2026-08-18","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33824","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-33824","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-33824"}
{"incident_id":"SEA-CISA-2026-34926","evidence_tier":"security_advisory","title":"Apex One issue could expose restricted files","summary":"Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on…","organization":"Trend Micro","incident_date":"2026-05-21","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://success.trendmicro.com/en-US/solution/KA-0023430","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2026-34926","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-34926"}
{"incident_id":"SEA-CISA-2026-42208","evidence_tier":"security_advisory","title":"LiteLLM issue could expose or alter stored data","summary":"BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.","organization":"BerriAI","incident_date":"2026-05-08","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2026-42208","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-42208"}
{"incident_id":"SEA-CISA-2026-45247","evidence_tier":"security_advisory","title":"Mirasvit Full Page Cache Warmer issue could make the application process unsafe input","summary":"Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the…","organization":"Mirasvit","incident_date":"2026-06-03","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer","failure_patterns":"SEA-FM-004","capabilities":"arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2026-45247","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-45247"}
{"incident_id":"SEA-CISA-2026-45498","evidence_tier":"security_advisory","title":"Defender issue could make the service unavailable","summary":"Microsoft Defender contains an unspecified vulnerability that allows for denial of service.","organization":"Microsoft","incident_date":"2026-05-20","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Defender Denial of Service Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2026-45498","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-45498"}
{"incident_id":"SEA-CISA-2026-45659","evidence_tier":"security_advisory","title":"SharePoint Server issue could make the application process unsafe input","summary":"Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network.","organization":"Microsoft","incident_date":"2026-07-01","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659","failure_patterns":"SEA-FM-004","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-45659","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-45659"}
{"incident_id":"SEA-CISA-2026-48172","evidence_tier":"security_advisory","title":"cPanel Plugin issue could grant elevated privileges","summary":"LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.","organization":"LiteSpeed","incident_date":"2026-05-26","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2026-48172","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-48172"}
{"incident_id":"SEA-CISA-2026-48558","evidence_tier":"security_advisory","title":"SimpleHelp issue could allow unauthorized access","summary":"SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their…","organization":"SimpleHelp","incident_date":"2026-06-29","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://simple-help.com/security/simplehelp-security-update-2026-05","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-48558","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-48558"}
{"incident_id":"SEA-CISA-2026-48907","evidence_tier":"security_advisory","title":"Joomla Content Editor issue could allow unauthorized access","summary":"Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload and execution of PHP code via the creation of new editor profiles for unauthenticated users.","organization":"Widget Factory","incident_date":"2026-06-16","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-48907","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-48907"}
{"incident_id":"SEA-CISA-2026-5430","evidence_tier":"security_advisory","title":"Multiple Products issue could expose restricted files","summary":"WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.","organization":"WSO2","incident_date":"2026-09-24","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/","failure_patterns":"SEA-FM-004","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-5430","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-5430"}
{"incident_id":"SEA-CISA-2026-56164","evidence_tier":"security_advisory","title":"Security issue reported in SharePoint Server","summary":"Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network.","organization":"Microsoft","incident_date":"2026-07-14","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56164","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-56164","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-56164"}
{"incident_id":"SEA-CISA-2026-59822","evidence_tier":"security_advisory","title":"Security issue reported in LiteLLM","summary":"BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer…","organization":"BerriAI","incident_date":"2026-09-02","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q","failure_patterns":"SEA-FM-004","capabilities":"data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-59822","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-59822"}
{"incident_id":"SEA-CISA-2026-60004","evidence_tier":"security_advisory","title":"Security issue reported in Gitea","summary":"Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the…","organization":"Gitea","incident_date":"2026-08-25","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-60004","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-60004"}
{"incident_id":"SEA-CISA-2026-60137","evidence_tier":"security_advisory","title":"Core issue could expose or alter stored data","summary":"WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain…","organization":"WordPress","incident_date":"2026-07-21","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://wordpress.org/news/2026/07/wordpress-7-0-2-release/","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-60137","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-60137"}
{"incident_id":"SEA-CISA-2026-63030","evidence_tier":"security_advisory","title":"Security issue reported in Core","summary":"WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.","organization":"WordPress","incident_date":"2026-07-21","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://wordpress.org/news/2026/07/wordpress-7-0-2-release/","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-63030","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-63030"}
{"incident_id":"SEA-CISA-2026-63077","evidence_tier":"security_advisory","title":"TeamCity issue could make the application process unsafe input","summary":"JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.","organization":"JetBrains","incident_date":"2026-08-05","date_basis":"","source_type":"cve_advisory","source_title":"JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/","failure_patterns":"SEA-FM-004","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-63077","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-63077"}
{"incident_id":"SEA-CISA-2026-64849","evidence_tier":"security_advisory","title":"MLflow issue could reach internal services","summary":"MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive responsestatus and responsebody.","organization":"MLflow","incident_date":"2026-08-19","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://github.com/mlflow/mlflow/pull/24258","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-64849","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-64849"}
{"incident_id":"SEA-CISA-2026-67277","evidence_tier":"security_advisory","title":"Security issue reported in RouterOS","summary":"MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.","organization":"MikroTik","incident_date":"2026-09-10","date_basis":"","source_type":"cve_advisory","source_title":"MikroTik RouterOS Missing Authentication for Critical Function Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://mikrotik.com/supportsec/september-2026-vulnerability/","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-67277","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-67277"}
{"incident_id":"SEA-CISA-2026-67279","evidence_tier":"security_advisory","title":"Security issue reported in RouterOS","summary":"Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request.","organization":"MikroTik","incident_date":"2026-09-25","date_basis":"","source_type":"cve_advisory","source_title":"Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://mikrotik.com/supportsec/september-2026-vulnerability/?utm_source=chatgpt.com","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-67279","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-67279"}
{"incident_id":"SEA-CISA-2026-72529","evidence_tier":"security_advisory","title":"Security issue reported in Server","summary":"TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.","organization":"TrueConf","incident_date":"2026-08-20","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://trueconf.com/blog/news/security-fixes-updates-and-advisories","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-72529","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-72529"}
{"incident_id":"SEA-CISA-2026-72530","evidence_tier":"security_advisory","title":"Security issue reported in Server","summary":"TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment…","organization":"TrueConf","incident_date":"2026-08-20","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://trueconf.com/blog/news/security-fixes-updates-and-advisories","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-72530","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-72530"}
{"incident_id":"SEA-CISA-2026-72898","evidence_tier":"security_advisory","title":"Metabase issue could expose or alter stored data","summary":"Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance.","organization":"Metabase","incident_date":"2026-08-11","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.metabase.com/blog/security-update","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action;auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-72898","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-72898"}
{"incident_id":"SEA-CISA-2026-76461","evidence_tier":"security_advisory","title":"Secure Email Gateway issue could expose or alter stored data","summary":"Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying…","organization":"Cisco","incident_date":"2026-09-14","date_basis":"","source_type":"cve_advisory","source_title":"Cisco Secure Email Gateway SQL Injection Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-76461","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-76461"}
{"incident_id":"SEA-CISA-2026-83548","evidence_tier":"security_advisory","title":"SMA1000 Appliances issue could reach internal services","summary":"SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized…","organization":"SonicWall","incident_date":"2026-09-02","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-83548","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-83548"}
{"incident_id":"SEA-CISA-2026-8452","evidence_tier":"security_advisory","title":"Security issue reported in NetScaler ADC and NetScaler Gateway","summary":"Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service.","organization":"Citrix","incident_date":"2026-08-26","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-8452","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-8452"}
{"incident_id":"SEA-CISA-2026-84869","evidence_tier":"security_advisory","title":"Security issue reported in ScreenConnect","summary":"ConnectWise ScreenConnect contains both an improper privilege management and missing authorization vulnerability that may allow an attacker to transfer and execute files through an active remote session without…","organization":"ConnectWise","incident_date":"2026-09-11","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-84869","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-84869"}
{"incident_id":"SEA-CISA-2026-85706","evidence_tier":"security_advisory","title":"Community Edition and Enterprise Edition issue could expose restricted files","summary":"GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication…","organization":"GitLab","incident_date":"2026-09-11","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/","failure_patterns":"SEA-FM-004","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-85706","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-85706"}
{"incident_id":"SEA-CISA-2026-87886","evidence_tier":"security_advisory","title":"Security issue reported in Backup","summary":"Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.","organization":"Acronis","incident_date":"2026-09-16","date_basis":"","source_type":"cve_advisory","source_title":"Acronis Backup Incorrect Default Permissions Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://security-advisory.acronis.com/advisories/SEC-10986","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-87886","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-87886"}
{"incident_id":"SEA-CISA-2026-87902","evidence_tier":"security_advisory","title":"Security issue reported in Core","summary":"WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local .php file outside the active theme directories,…","organization":"WordPress","incident_date":"2026-09-25","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-87902","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-87902"}
{"incident_id":"SEA-CISA-2026-88772","evidence_tier":"security_advisory","title":"Security issue reported in NetScaler","summary":"Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service","organization":"Citrix","incident_date":"2026-09-27","date_basis":"","source_type":"cve_advisory","source_title":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-88772","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-88772"}
{"incident_id":"SEA-CISA-2026-88779","evidence_tier":"security_advisory","title":"Security issue reported in NetScaler","summary":"Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a…","organization":"Citrix","incident_date":"2026-10-04","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-88779","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-88779"}
{"incident_id":"SEA-CISA-2026-9082","evidence_tier":"security_advisory","title":"Core issue could expose or alter stored data","summary":"Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API.","organization":"Drupal","incident_date":"2026-05-22","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.drupal.org/sa-core-2026-004","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cve_references":"CVE-2026-9082","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-9082"}
{"incident_id":"SEA-CISA-2026-93616","evidence_tier":"security_advisory","title":"Multiple Products issue could expose restricted files","summary":"Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to…","organization":"Check Point","incident_date":"2026-09-22","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://support.checkpoint.com/results/sk/sk1000171/","failure_patterns":"SEA-FM-004","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-93616","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-93616"}
{"incident_id":"SEA-CISA-2026-94127","evidence_tier":"security_advisory","title":"Security issue reported in BIG-IP APM","summary":"F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server.","organization":"F5","incident_date":"2026-09-22","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://my.f5.com/manage/s/article/K000162605","failure_patterns":"SEA-FM-004","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-94127","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-94127"}
{"incident_id":"SEA-CISA-2026-9586","evidence_tier":"security_advisory","title":"Switchvox issue could expose or alter stored data","summary":"Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request,…","organization":"Sangoma","incident_date":"2026-09-02","date_basis":"","source_type":"vendor_postmortem","source_title":"CISA Known Exploited Vulnerabilities Directive","source_publisher":"U.S. Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026","failure_patterns":"SEA-FM-004","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Federal Security Directive Patch & Isolation: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cve_references":"CVE-2026-9586","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CISA-2026-9586"}
{"incident_id":"SEA-CVE-2017-20283","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may allow a crafted UDP packet to overflow the destination buffer, resulting in memory corruption, or denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-20283","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2017-20283","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2017-20283"}
{"incident_id":"SEA-CVE-2023-54406","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.insafeexec global flag can become False during Server Script execution when one server script triggers another.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one server script triggers another. Authenticated high-privileged users can craft a Server Script that triggers other server scripts, such as by saving a document, so the remaining code runs without safe execution protections.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54406","failure_patterns":"","capabilities":"auth.code_execution;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2023-54406","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2023-54406"}
{"incident_id":"SEA-CVE-2023-54411","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Attackers can generate a valid key to view documents through the print view without proper permissions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54411","failure_patterns":"","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2023-54411","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2023-54411"}
{"incident_id":"SEA-CVE-2024-22031","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster. This results in the user gaining access to the other project in the different cluster, resulting in a privilege escalation. This happens because the namespace used on the local cluster to store related resources (PRTBs and secrets) is the name of the project.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22031","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2024-22031","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2024-22031"}
{"incident_id":"SEA-CVE-2024-34319","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and web requests via a crafted HTTP request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34319","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2024-34319","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2024-34319"}
{"incident_id":"SEA-CVE-2024-34320","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34320","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2024-34320","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2024-34320"}
{"incident_id":"SEA-CVE-2024-34324","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId cookie.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34324","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2024-34324","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2024-34324"}
{"incident_id":"SEA-CVE-2024-58391","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered. Remote attackers can craft a malicious printview URL that, when visited by a victim, injects HTML and executes script in the victim's browser session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-58391","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2024-58391","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2024-58391"}
{"incident_id":"SEA-CVE-2024-8122","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA).","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). This allows unused OTPs to remain valid indefinitely, presenting an opportunity for malicious actors to conduct brute force attacks by repeatedly guessing the OTP. The absence of automatic expiration for OTPs grants attackers an unlimited timeframe to attempt guessing the correct code. A successful brute force attack can lead to an MFA bypass, resulting in the unauthorized takeover of a user's account and compromising the security and privacy of both the individual and the system.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8122","failure_patterns":"SEA-FM-012","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2024-8122","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2024-8122"}
{"incident_id":"SEA-CVE-2025-14123","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11.","organization":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set an arbitrary role (e.g., Administrator) when performing a profile update if a plugin or theme using this framework has added at least one user profile field that leverages ReduxUsers project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set an arbitrary role (e.g., Administrator) when performing a profile update if a plugin or theme using this framework has added at least one user profile field that leverages Redux_Users::set_profile/set_section/set_field.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14123","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2025-14123","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2025-14123"}
{"incident_id":"SEA-CVE-2025-15700","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly accessible, network-shared directory and achieve remote code execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15700","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2025-15700","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2025-15700"}
{"incident_id":"SEA-CVE-2025-27895","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27895","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2025-27895","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2025-27895"}
{"incident_id":"SEA-CVE-2025-27896","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27896","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2025-27896","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2025-27896"}
{"incident_id":"SEA-CVE-2025-27897","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27897","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2025-27897","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2025-27897"}
{"incident_id":"SEA-CVE-2025-29895","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","organization":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29895","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2025-29895","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2025-29895"}
{"incident_id":"SEA-CVE-2025-29896","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","organization":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29896","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2025-29896","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2025-29896"}
{"incident_id":"SEA-CVE-2025-61560","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"A race condition vulnerability in the SessionManager of CNCF project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated crafted requests.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61560","failure_patterns":"SEA-FM-001;SEA-FM-008","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Idempotency and re-validation at execution: Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","cve_references":"CVE-2025-61560","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2025-61560"}
{"incident_id":"SEA-CVE-2025-66969","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Integer overflow in OpenModSim (<=1.11.0), leading to denial of service","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66969","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2025-66969","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2025-66969"}
{"incident_id":"SEA-CVE-2025-71428","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents, including other accounts' password hashes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71428","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2025-71428","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2025-71428"}
{"incident_id":"SEA-CVE-2026-0311","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0311","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-0311","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-0311"}
{"incident_id":"SEA-CVE-2026-100104","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to time-of-use race condition in URL validation during repository import operations.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100104","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-100104","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100104"}
{"incident_id":"SEA-CVE-2026-100136","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100136","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-100136","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100136"}
{"incident_id":"SEA-CVE-2026-100137","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100137","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-100137","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100137"}
{"incident_id":"SEA-CVE-2026-100138","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100138","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-100138","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100138"}
{"incident_id":"SEA-CVE-2026-100139","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100139","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-100139","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100139"}
{"incident_id":"SEA-CVE-2026-100158","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value-$xargs from $wpdb-getresults())' parameter in all versions up to, and including, 3.0.6 due to…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value->$xarg_s from $wpdb->get_results())' parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires an administrator to have published a chart whose SQL query returns a column controllable by a lower-privileged user, such as wp_users.display_name, which a Subscriber can populate with a payload via the standard WordPress profile page at /wp-admin/profile.php.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100158","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-100158","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100158"}
{"incident_id":"SEA-CVE-2026-100161","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcprimageuploadid' parameter in all versions up to, and including, 1.2.30 due to insufficient input…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcpr_image_upload_id' parameter in all versions up to, and including, 1.2.30 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The publicly-emitted wcpr_image_upload nonce printed on every product review form is the only gate, and no capability, authentication, or attachment ownership check is performed, allowing the payload to be stored in comment meta — which is not subject to wp_kses — by any unauthenticated visitor; the XSS fires once the review is visible on the frontend.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100161","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-100161","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100161"}
{"incident_id":"SEA-CVE-2026-100163","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the…","organization":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the OsCustomerHelper project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 via the OsCustomerHelper::create_wp_user_for_customer() helper reached from the public process_step_customer() booking step. When the 'Use WordPress users as customers' option is enabled, the helper falls back from email_exists() to username_exists( $customer->email ), which matches any WordPress user whose user_login equals the victim customer's email even when that user's user_email is completely different, and links that WordPress user's ID into the victim's LatePoint customer row (only privileged roles are excluded; Subscriber is allowed). This makes it possible for authenticated attackers, with Subscriber-level access and above, to take over another customer's LatePoint account — accessing their bookings, service, agent, and calendar data, and having the victim customer's email overwritten with the attacker's on next login — by holding a Subscriber account whose user_login equals the victim's email and submitting an unauthenticated public booking step registration request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100163","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"auth.privileged_action;auth.public_publication;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-100163","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100163"}
{"incident_id":"SEA-CVE-2026-100169","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.pre_social_login() in api/src/backend/api/adapters.py links a Google or GitHub login to any existing local account that has the same email address as the one returned by the provider, without requiring that the address has been verified by the provider or on the existing account, and without any other check that both accounts belong to the same person. Self registration is open and the new account is usable at once, because UserViewSet.get_permissions() in api/src/backend/api/v1/views.py grants AllowAny to the create action, ACCOUNT_EMAIL_VERIFICATION is set to none in api/src/backend/config/settings/social_login.py, and the Django ModelBackend checks only the password and is_active, not the django-allauth EmailAddress record. An attacker who registers an email address before its owner keeps the password set at registration after the link is made, because sociallogin.connect() does not reset the password and does not disable the existing account, and the owner who later signs in with Google or GitHub is logged into the attacker's account. django-allauth makes the same email based link on its own, because SOCIALACCOUNT_EMAIL_AUTHENTICATION and SOCIALACCOUNT_EMAIL_AUTHENTICATION_AUTO_CONNECT are both set to True in the same settings module. This gives the attacker the cloud provider credentials, scan findings and tenant memberships held in the account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100169","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-100169","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100169"}
{"incident_id":"SEA-CVE-2026-100200","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100200","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-100200","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100200"}
{"incident_id":"SEA-CVE-2026-100730","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function;","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated network attacker. This allows an attacker to trigger deserialization of an arbitrary object graph, which could allow remote code execution under the privileges of the affected service account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100730","failure_patterns":"SEA-FM-002","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-100730","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-100730"}
{"incident_id":"SEA-CVE-2026-101024","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitation could result in unauthorized file creation or modification and, under certain conditions, arbitrary code execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101024","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-101024","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-101024"}
{"incident_id":"SEA-CVE-2026-101025","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails.","organization":"Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process. An unauthenticated attacker may send requests with malformed XML and can cause unbounded memory growth in long-lived NGINX worker processes. Impact This vulnerability may allow remote attackers to send requests that trigger repeated parsing of malformed XML and may lead to NGINX worker termination or denial of service. There is no control plane exposure; this is a data plane issue only. Note project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanup and the context was not released for the lifetime of the process. An unauthenticated attacker may send requests with malformed XML and can cause unbounded memory growth in long-lived NGINX worker processes. Impact This vulnerability may allow remote attackers to send requests that trigger repeated parsing of malformed XML and may lead to NGINX worker termination or denial of service. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101025","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-101025","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-101025"}
{"incident_id":"SEA-CVE-2026-101287","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier (userId) and the status of the authentication process (validSteps) in this cookie and relies on these values—which can be modified by the client—to complete the login process. A remote attacker, without valid credentials or interaction from other users, could manipulate the cookie to bypass authentication checks and impersonate any account, including one with SUPER_ADMIN privileges. This would allow the attacker to obtain a valid JWT token with administrative privileges and compromise the confidentiality and integrity of the application.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101287","failure_patterns":"SEA-FM-003","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-101287","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-101287"}
{"incident_id":"SEA-CVE-2026-101290","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A remote attacker may send a specially crafted network packet that causes the","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validation of packet length. This may result in an application crash and a denial-of-service condition.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101290","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-101290","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-101290"}
{"incident_id":"SEA-CVE-2026-101300","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the parameter of the POST…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the <svg> parameter of the POST request generated by selecting Download PDF. The content is processed by the export.highcharts.com service, which sends HTTP requests to attacker-controlled external resources and embeds their responses in the generated PDF. The reported behavior allows the export service to be used as an intermediary for these requests.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101300","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-101300","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-101300"}
{"incident_id":"SEA-CVE-2026-101302","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional NULL pointer dereference, causing a kernel panic. A remote TLS 1.3 peer can send a specially crafted record to trigger a kernel panic, resulting in a Denial of Service (DoS).","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101302","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-101302","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-101302"}
{"incident_id":"SEA-CVE-2026-101924","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page.","organization":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping of the visitor-supplied query string that the plugin records in its statistics table project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping of the visitor-supplied query string that the plugin records in its statistics table: the newstatpress_generate_overview_lastreferrers() function concatenates the stored urlrequested value into a single-quoted href attribute after only FILTER_SANITIZE_URL, which does not encode the apostrophe. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a high-privileged user, such as an administrator, accesses the Overview page and hovers the injected link.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101924","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-101924","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-101924"}
{"incident_id":"SEA-CVE-2026-101926","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variationids' parameter of the 'woocommerceremovevariations' AJAX action in versions up to, and including, 1.5.0 due…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variation_ids' parameter of the 'woocommerce_remove_variations' AJAX action in versions up to, and including, 1.5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101926","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-101926","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-101926"}
{"incident_id":"SEA-CVE-2026-101998","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could forward unmasked bytes. Code inside an authorized sandbox could use this to recover host-managed OAuth access and refresh tokens or a derived Anthropic API key intended to remain outside the sandbox.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101998","failure_patterns":"SEA-FM-012","capabilities":"auth.code_execution;auth.privileged_action;data.credentials_secrets","is_ai_system":true,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-101998","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-101998"}
{"incident_id":"SEA-CVE-2026-102073","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions),…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to read portions of device memory or to cause a denial-of-service condition.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102073","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-102073","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102073"}
{"incident_id":"SEA-CVE-2026-102074","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions),…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102074","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-102074","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102074"}
{"incident_id":"SEA-CVE-2026-102075","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions),…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user input in multipart handling. This could allow an unauthenticated remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102075","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-102075","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102075"}
{"incident_id":"SEA-CVE-2026-102076","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions),…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The affected product web service does not properly validate user-supplied input in upload code. This could allow an unauthenticated remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102076","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-102076","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102076"}
{"incident_id":"SEA-CVE-2026-102202","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102202","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-102202","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102202"}
{"incident_id":"SEA-CVE-2026-102216","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102216","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-102216","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102216"}
{"incident_id":"SEA-CVE-2026-102251","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. AES-CTR is a malleable stream cipher, so an attacker who obtains one legitimate token by abandoning a cart with an email address they control can recover the keystream and forge a ciphertext carrying arbitrary SQL. The HMAC check added in 10.4.1 is enforced only when the wcap_nonce parameter is present, so omitting the parameter skips it entirely.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102251","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-102251","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102251"}
{"incident_id":"SEA-CVE-2026-102291","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This is due to the plugin substituting a…","organization":"The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This is due to the plugin substituting a user's displayname into the composed page markup unfiltered and then running the whole result through doshortcode() in TheFrontend project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This is due to the plugin substituting a user's display_name into the composed page markup unfiltered and then running the whole result through do_shortcode() in TheFrontend::replace_content(). Because display_name is writable by any user on their own account through the core profile form, this makes it possible for authenticated attackers with Subscriber-level access and above to execute arbitrary shortcodes. Where the page is a users collection — an ordinary team or member-directory page — the shortcode runs in the request of every visitor, including unauthenticated ones. Requires a published page with a Kirki element whose dynamic content is bound to the display_name user field.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102291","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-102291","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102291"}
{"incident_id":"SEA-CVE-2026-102354","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by isValidCertificateUrl() and isValidTsaUrl(), separately from the outbound fetch(targetUrl, ...). In deployments where PROXY_SECRET validation is not enabled, a direct client that controls authoritative DNS can forge the Origin header, supply a certificate, OCSP, CRL, or TSA URL that passes the proxy's accepted path checks, return a public address during validation, and return a private or link-local address during the later fetch. The endpoint can return allowed response bodies to the attacker, but exploitation requires precise timing, redirects and IP-literal obfuscation are blocked, and network reachability limits the target. This vulnerability is fixed in 2.8.7.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102354","failure_patterns":"SEA-FM-012","capabilities":"auth.infrastructure_modification;auth.public_publication;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-102354","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102354"}
{"incident_id":"SEA-CVE-2026-102462","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite…","organization":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle SQL Server can send a continuous stream of TDS packets without setting the ENDOFMESSAGE status flag, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle SQL Server can send a continuous stream of TDS packets without setting the END_OF_MESSAGE status flag, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-mssql-client.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102462","failure_patterns":"","capabilities":"arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-102462","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102462"}
{"incident_id":"SEA-CVE-2026-102466","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared…","organization":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an attacker with man-in-the-middle positioning, can send a crafted result set packet with an extremely large column count, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Netty event loop thread, causing a complete denial of service for all connections and verticles in the Vert.x application. The impacted component is io.vertx project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column definitions based on a server-declared column count with no upper-bound validation. A malicious or compromised MySQL server, or an attacker with man-in-the-middle positioning, can send a crafted result set packet with an extremely large column count, causing the client to attempt a massive heap allocation. The resulting OutOfMemoryError crashes the Netty event loop thread, causing a complete denial of service for all connections and verticles in the Vert.x application. The impacted component is io.vertx:vertx-mysql-client.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102466","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-102466","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102466"}
{"incident_id":"SEA-CVE-2026-102469","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT)…","organization":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT) column data using a bare ObjectInputStream.readObject() call with no ObjectInputFilter or class allowlist. This code path is triggered when a DRDA server sends a result set with a column tagged as UDT (FDOCA protocol LID 0x50). However, DB2 does not support this type of UDT. The FDOCA 0x50 type is never sent by a legitimate DB2 server. Nevertheless, a malicious or man-in-the-middle DRDA server could craft a response with a 0x50-tagged column, causing the client to deserialize arbitrary attacker-controlled bytes on the Vert.x event loop before any application code can inspect or reject the data. If a Java deserialization gadget chain is present on the application's classpath, this enables remote code execution. Without a gadget chain, denial of service is possible via crafted object graphs. TLS is disabled by default, making man-in-the-middle exploitation feasible. The impacted component is io.vertx project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that deserializes User Defined Type (UDT) column data using a bare ObjectInputStream.readObject() call with no ObjectInputFilter or class allowlist. This code path is triggered when a DRDA server sends a result set with a column tagged as UDT (FDOCA protocol LID 0x50). However, DB2 does not support this type of UDT. The FDOCA 0x50 type is never sent by a legitimate DB2 server. Nevertheless, a malicious or man-in-the-middle DRDA server could craft a response with a 0x50-tagged column, causing the client to deserialize arbitrary attacker-controlled bytes on the Vert.x event loop before any application code can inspect or reject the data. If a Java deserialization gadget chain is present on the application's classpath, this enables remote code execution. Without a gadget chain, denial of service is possible via crafted object graphs. TLS is disabled by default, making man-in-the-middle exploitation feasible. The impacted component is io.vertx:vertx-db2-client.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102469","failure_patterns":"SEA-FM-002","capabilities":"data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-102469","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102469"}
{"incident_id":"SEA-CVE-2026-102488","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those actually granted to them.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102488","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-102488","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102488"}
{"incident_id":"SEA-CVE-2026-102539","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. From 17.3.0 until 18.13.1, the SuperSync end-to-end encryption setup calls sync(true) before a user sets an…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. From 17.3.0 until 18.13.1, the SuperSync end-to-end encryption setup calls sync(true) before a user sets an encryption password, causing the operation-upload path to transmit and store all user operations in plaintext. The exposed operations can include private task content and connected issue-provider credentials, including reusable passwords, API tokens, and app passwords. Users who complete E2EE setup have the plaintext operations deleted, while users who leave the password-setting step can leave the data stored indefinitely. The Disable SuperSync action did not remove plaintext that had already been uploaded. Routing and causal metadata remain plaintext by design and are not part of this vulnerability. This issue is fixed in version 18.13.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102539","failure_patterns":"SEA-FM-012","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.credentials_secrets;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-102539","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102539"}
{"incident_id":"SEA-CVE-2026-102554","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102554","failure_patterns":"SEA-FM-006","capabilities":"auth.infrastructure_modification;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-102554","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102554"}
{"incident_id":"SEA-CVE-2026-102596","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with hasrbac=true, two private flow-read routes, GET…","organization":"Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with hasrbac=true, two private flow-read routes, GET /api/v1/integrations/ project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with has_rbac=true, two private flow-read routes, GET /api/v1/integrations/:providerConfigKey/flows and GET /api/v1/flow/:flowName, apply webAuth but omit can({ action: 'read', resource: 'flow', scopedBy: envScope }). A same-team user with the development_full_access role can therefore request env=prod and read production integration flow metadata or named flow configuration despite being denied by guarded production routes. Both controllers use res.locals.environment from the authenticated account, so the issue bypasses the production role boundary but does not cross tenant boundaries. This issue is fixed in version 0.70.9 and managed-1.5.11-0.70.8-aae30d044d7e229807d51a3957c212f3fb689e1a","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102596","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-102596","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102596"}
{"incident_id":"SEA-CVE-2026-102607","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events or View Snapshots permission submits an event export request with a crafted exportFile value, a valid CSRF token, and exportDetail enabled. The affected components are exportEvents(), exportFile, web/ajax/event.php, web/skins/classic/includes/export_functions.php. In this attack mechanism, the crafted exportFile value reaches the trailing directory argument of a tar or zip command executed by exec(). The attacker can execute arbitrary operating system commands as the web server user. This issue is fixed in version 1.38.3.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102607","failure_patterns":"","capabilities":"auth.code_execution;auth.privileged_action;data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-102607","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102607"}
{"incident_id":"SEA-CVE-2026-102631","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provider ID. If an identity provider reassigns an email address, which authd uses as the username, to a new account, the new account inherits the previous user's local UID and home directory on its next login. This allows the new user to access and modify files belonging to the previous user, including credentials such as SSH keys and cloud API tokens, and silently rebinds the local account record to the new identity. As a mitigation, administrators should lock or delete the previous user's local authd account when the corresponding IdP account is removed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102631","failure_patterns":"SEA-FM-012","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-102631","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102631"}
{"incident_id":"SEA-CVE-2026-102693","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_sta_set_current_ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE_ATWINC15X0_DYNAMIC_CONNECT is enabled, a nearby attacker can advertise a malformed or oversized SSID that is processed during Wi-Fi scanning, causing memory corruption and potentially a hard fault, denial of service, or code execution. This issue is fixed in version 2026.04.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102693","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-102693","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102693"}
{"incident_id":"SEA-CVE-2026-102784","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request input. A GET request can therefore reach the action without the trait checking a token. The action still requires core.tools , but that is the victim’s permission check; it does not prove that the privileged user intended the request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102784","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-102784","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102784"}
{"incident_id":"SEA-CVE-2026-102916","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs() and vieemulatestos() in…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vie_emulate_movs() and vie_emulate_stos() in usr/src/uts/intel/io/vmm/vmm_instruction_emul.c do not clear the VIES_REPEAT status flag on the final iteration. For MMIO regions emulated in the kernel (the local APIC, I/O APIC and HPET), the stale flag causes a VERIFY assertion in vie_advance_pc() to fail, and the host panics. A privileged user within a guest VM can issue a REP MOVS or REP STOS instruction against the local APIC page to cause a denial of service of the host and every other guest running on it. The flaw has existed since 2020 (illumos-gate commit e0c0d44e), and affects any illumos distribution prior to illumos-gate commit 696ecf8d.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102916","failure_patterns":"SEA-FM-006","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-102916","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102916"}
{"incident_id":"SEA-CVE-2026-102986","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires authentication for write operations but does…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires authentication for write operations but does not verify workspace or project membership. An authenticated user who knows a published project's public DeployBoard.anchor can create FileAsset records in that project and soft-delete existing assets by identifier, allowing cross-workspace file injection, storage abuse, and data loss. The issue is fixed in version 1.4.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102986","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-102986","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-102986"}
{"incident_id":"SEA-CVE-2026-103010","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString) in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no…","organization":"Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString) in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a local interactive user with no hMailServer credentials to write bytes of their choosing past the end of a 255-byte heap buffer in the hMailServer service process, which runs as LocalSystem by default. The user does this by passing a long hexadecimal string to the COM method Utilities.BlowfishDecrypt, which checked no authentication. The routine converted hexadecimal input of any length into a fixed 255-byte buffer before decrypting it in place. The result is a denial of service (service crash), and possibly code execution with the privileges of the service account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103010","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-103010","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103010"}
{"incident_id":"SEA-CVE-2026-103011","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, called by EncryptToString) in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to…","organization":"Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, called by EncryptToString) in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service (service crash), and possibly other unspecified impact. In 6.3.4 and 6.3.5, where the self-service REST API is enabled (it is off by default), the user does this remotely by adding a fetch account whose password is 129 to 247 characters long and not a multiple of 8, and then requesting their personal data export (GET /api/v1/me/export.zip), which encrypts that password with the legacy scheme. The same flaw is reachable on Windows by any local interactive user with no hMailServer credentials, through the COM method Utilities.BlowfishEncrypt, which checked no authentication. It is also reachable by every stored-secret write when ProtectStoredSecretsWithDPAPI is set to 0. For such a length, the routine's padding loop writes up to 7 zero bytes 2 to 232 bytes past the end of its 255-byte heap buffer. The ciphertext it returns is still correct.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103011","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-103011","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103011"}
{"incident_id":"SEA-CVE-2026-103223","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum…","organization":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send a message header with the length field set to an extremely large value (up to Integer.MAXVALUE), causing the decoder to accumulate subsequent TCP data into a composite buffer without bound, leading to unbounded memory allocation on the client and an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send a message header with the length field set to an extremely large value (up to Integer.MAX_VALUE), causing the decoder to accumulate subsequent TCP data into a composite buffer without bound, leading to unbounded memory allocation on the client and an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-pg-client.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103223","failure_patterns":"SEA-FM-006","capabilities":"auth.financial_action;auth.write_action;data.financial_records","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-103223","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103223"}
{"incident_id":"SEA-CVE-2026-103224","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any…","organization":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send a continuous stream of packets with the maximum payload length (0xFFFFFF), preventing the end-of-message condition from being reached, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle MySQL server can send a continuous stream of packets with the maximum payload length (0xFFFFFF), preventing the end-of-message condition from being reached, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes. The impacted component is io.vertx:vertx-mysql-client.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103224","failure_patterns":"","capabilities":"auth.write_action;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103224","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103224"}
{"incident_id":"SEA-CVE-2026-103304","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the emails the site sends.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103304","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103304","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103304"}
{"incident_id":"SEA-CVE-2026-103305","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103305","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103305","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103305"}
{"incident_id":"SEA-CVE-2026-103307","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its payment webhook with a signing secret that…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its payment webhook with a signing secret that is empty by default, allowing unauthenticated attackers to perform SQL injection attacks and to mark arbitrary orders as paid.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103307","failure_patterns":"SEA-FM-002","capabilities":"auth.financial_action;data.pii;data.untrusted_external_text;data.credentials_secrets;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-103307","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103307"}
{"incident_id":"SEA-CVE-2026-103324","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default,…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used to sign them is empty by default, allowing unauthenticated attackers to forge an approved-payment notification and mark arbitrary orders as paid, or force them to failed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103324","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;data.credentials_secrets;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-103324","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103324"}
{"incident_id":"SEA-CVE-2026-103329","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing key used to validate their signature is empty by default, allowing…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing key used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid signature and mark arbitrary WooCommerce orders as paid without payment.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103329","failure_patterns":"","capabilities":"auth.financial_action;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103329","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103329"}
{"incident_id":"SEA-CVE-2026-103365","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step.","organization":"The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step. The endpoint booklyrenderdetails is registered for both wpajax and wpajaxnopriv, the module overrides csrfTokenValid() to always return true, and Bookly\\Frontend\\Components\\Booking\\InfoText project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step. The endpoint bookly_render_details is registered for both wp_ajax and wp_ajax_nopriv, the module overrides csrfTokenValid() to always return true, and Bookly\\Frontend\\Components\\Booking\\InfoText::getCodes() calls UserBookingData::getCustomer() to load the persisted Customer entity keyed solely by the attacker-supplied phone (or email) with no invocation of the plugin's own customerIdentityConfirmed() predicate. When a site owner has placed the supported {client_name}, {client_email}, {client_phone}, or {client_note} placeholders into the Details step's Appearance information text, the matched customer's stored name, email, phone and internal notes are substituted into the returned HTML. This makes it possible for unauthenticated attackers who know only a registered customer's primary phone (or email) to read that customer's stored personal data.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103365","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103365","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103365"}
{"incident_id":"SEA-CVE-2026-103366","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.3 via the booking[id] and…","organization":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.3 via the booking[id] and cart[id] parameters on the stepsreloadbookingformsummarypanel and stepsstart public routes (reachable through wpajaxnoprivlatepointroutecall). This is due to OsStepsHelper project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.7.3 via the booking[id] and cart[id] parameters on the steps__reload_booking_form_summary_panel and steps__start public routes (reachable through wp_ajax_nopriv_latepoint_route_call). This is due to OsStepsHelper::set_required_objects() feeding raw request parameters into set_booking_object() and set_cart_object(), which call OsModel::set_data() and load an arbitrary booking or cart row by primary key with no ownership check — the ownership guard the vendor added for the earlier disclosure lives only inside OsStepsHelper::load_step() and does not cover the sibling routes or cart[id] at all. This makes it possible for unauthenticated attackers to enumerate sequential booking / cart identifiers and read other customers' appointment details (service name, agent, date/time, duration, price breakdown, status) and other shoppers' pending checkout contents directly from the JSON responses.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103366","failure_patterns":"SEA-FM-010","capabilities":"auth.financial_action;auth.public_publication;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103366","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103366"}
{"incident_id":"SEA-CVE-2026-103367","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billingaddress.firstname' parameter parameter.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation requires a published recipe that processes the {{ customer.first_name }} placeholder — the plugin's built-in \"New Order email with social media profile links\" recipe satisfies this requirement out of the box, making the default configuration exploitable with no account, cookie, or nonce by simply submitting a guest checkout with the payload as the billing first name.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103367","failure_patterns":"SEA-FM-002","capabilities":"auth.financial_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-103367","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103367"}
{"incident_id":"SEA-CVE-2026-103380","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.3 via the…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.3 via the 'params[customer][first_name]' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract privileged booking data including the administrator-only admin_notes field, assigned agent internal contact details, transaction tokens, and payment request URLs delivered via rendered notification emails. A LatePoint customer can exploit this by storing a template placeholder such as {{customer_admin_notes}} in their own first_name field via the customer_cabinet__update route, then triggering the password-reset email flow to receive the expanded value in the resulting notification.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103380","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"auth.financial_action;auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-103380","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103380"}
{"incident_id":"SEA-CVE-2026-103415","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the contents of that cookie come from the peer, and the write happens before certificate authentication completes, so a malicious or compromised server can overwrite memory past the caller supplied TLS packet buffer without presenting a certificate. Only the client path is affected.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103415","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103415","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103415"}
{"incident_id":"SEA-CVE-2026-103482","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptinfields[] (e.g.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fields[<custom_field_merge_tag>] (e.g. first_name)' parameter in all versions up to, and including, 4.3.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The attack chain requires a published campaign post whose body contains a [[subscriber.]] merge tag; the unauthenticated attacker first POSTs the entity-encoded payload to the public manage_preferences form (which issues its own nonce on the same page), then pivots execution by embedding their confirm_key in a campaign preview URL sent to a privileged user via social engineering.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103482","failure_patterns":"","capabilities":"auth.privileged_action;auth.public_publication;data.pii","is_ai_system":true,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103482","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103482"}
{"incident_id":"SEA-CVE-2026-103508","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search service account. This issue affects P4 Search 2026.4.2 and earlier. Perforce resolved it in 2026.4.3.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103508","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-103508","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103508"}
{"incident_id":"SEA-CVE-2026-103509","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation. This affects 2026.4.2 and earlier and is fixed in 2026.4.3.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103509","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-103509","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103509"}
{"incident_id":"SEA-CVE-2026-103517","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incoming payment notification genuinely comes from the payment provider when no webhook secret has been configured, allowing unauthenticated attackers to forge one and mark orders as paid without paying.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103517","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;data.credentials_secrets;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-103517","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103517"}
{"incident_id":"SEA-CVE-2026-103520","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute (user-defined field name)' parameter in all versions…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute (user-defined field name)' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable when an administrator has configured a Text attribute whose display format places the %value% token inside an HTML attribute (e.g., title=\"%value%\"), which is a documented HivePress pattern.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103520","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103520","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103520"}
{"incident_id":"SEA-CVE-2026-103528","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions into email templates via the messages configuration interface, and when the template is previewed or rendered, functions such as system(), exec(), file_put_contents(), and file_get_contents() can be executed with the privileges of the web process. This allows arbitrary OS command execution, file read/write operations, and RCE on the underlying server.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103528","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-103528","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103528"}
{"incident_id":"SEA-CVE-2026-103529","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can include malicious PHP code in a module's install() method which will then be executed upon installation, enabling remote code execution with the privileges of the web server.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103529","failure_patterns":"SEA-FM-002","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-103529","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103529"}
{"incident_id":"SEA-CVE-2026-103549","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with maintainer-role permissions to remove certain package registry metadata that package protection rules restrict to higher roles, due to improper authorization checks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103549","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-103549","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103549"}
{"incident_id":"SEA-CVE-2026-103560","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103560","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-103560","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103560"}
{"incident_id":"SEA-CVE-2026-103572","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103572","failure_patterns":"","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103572","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103572"}
{"incident_id":"SEA-CVE-2026-103635","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp).","organization":"Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() read header fields before checking that the input was long enough. For the compressed format, the size check could be defeated by a 32-bit overflow, and two header fields that control decoding were not validated; this also affected deserialization from a stream. A crafted or truncated sketch could cause a read past the end of the input. In the compressed case the over-read can be large, and the bytes read can become part of the deserialized sketch. This can cause a crash (denial of service) and could expose adjacent memory contents. This issue affects Apache DataSketches C++: from 3.1.0 before 5.3.0. Only applications that deserialize Theta sketches from untrusted sources are affected. Users are recommended to upgrade to version 5.3.0, which fixes this issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103635","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;data.pii;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-103635","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103635"}
{"incident_id":"SEA-CVE-2026-103636","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp).","organization":"Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes past the end of the input. For such inputs, the size remaining for the embedded sketch was also computed by an unsigned subtraction that could wrap around, so the embedded sketch's own size checks no longer limited reads to the input. The bytes read can become part of the deserialized union's state. This can cause a crash (denial of service) and could expose adjacent memory contents. This issue affects Apache DataSketches C++: from 2.0.0-incubating before 5.3.0. Only applications that deserialize VarOpt unions from untrusted sources are affected. Users are recommended to upgrade to version 5.3.0, which fixes this issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103636","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-103636","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103636"}
{"incident_id":"SEA-CVE-2026-103646","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account matching the submitted email address, and its duplicate-account check normalizes that address differently from the lookup used to create the customer, so an unauthenticated attacker can log in as any existing user, including a Network Super Admin, whose email address they know. This bypass is not addressed by the 2.15.1 fix for CVE-2026-75957 and remains exploitable in all versions up to and including 2.16.1, the releases that fix was expected to cover. Exploitation requires a checkout form configured without a password field (auto-generated password) and a target account that has no existing customer record in the Ultimate Multisite WordPress plugin before 2.17.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103646","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-103646","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103646"}
{"incident_id":"SEA-CVE-2026-103647","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that user's session.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webmail's origin with that user's session. When the webmail decrypted an S/MIME message (from 6.3.2) or an OpenPGP message (from 6.3.4) in the browser, it offered each decrypted attachment as a blob URL of the media type the message declared for it. A click saved the file, but if the user opened the attachment in a new tab, a part declared as text/html was rendered as a document of the webmail's origin and its script could read the mailbox, send mail and change the account through the REST API. The webmail is served only when the REST API is enabled, which it is not by default.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103647","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103647","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103647"}
{"incident_id":"SEA-CVE-2026-103649","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery (denial of service).","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery (denial of service). The server set its socket timeouts in the form Windows takes, which Linux refuses, and its HTTPS clients read without a deadline, so a peer that accepts a connection and then sends nothing held the waiting thread for as long as the connection stayed open. The MTA-STS policy fetch, enabled by default, is made during outbound delivery to mta-sts.<recipient domain>, so anyone who can make the server deliver mail to a domain they control - for example as the envelope sender of a message that bounces - can hold delivery threads until outbound delivery stops. The same flaw affects the DANE TLSA query, the OAuth2 token request, the ACME client, and the ManageSieve and metrics listeners, which a silent client stops from serving anyone else. Windows builds are not affected.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103649","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-103649","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103649"}
{"incident_id":"SEA-CVE-2026-103658","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader.","organization":"GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative and the backing buffer is never grown. ReadOnlyDict::load() in modules/speller/default/readonly_ws.cpp passes the unvalidated 32-bit size fields from a .rws dictionary header into this path, so a crafted .rws file with a valid endian marker (12345678) and an oversized length field (e.g. lang_name_size = 0x7FFFFFFF) causes attacker-controlled data to be written out of bounds past an undersized heap allocation. An attacker who induces a victim to load a malicious dictionary — for example via aspell dump master <file> — can corrupt heap memory, resulting in denial of service and potentially code execution. Fixed in b830b6e and will be fixed in release 0.60.8.3.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103658","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-103658","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103658"}
{"incident_id":"SEA-CVE-2026-103692","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including administrators.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103692","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103692","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103692"}
{"incident_id":"SEA-CVE-2026-103695","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103695","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-103695","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103695"}
{"incident_id":"SEA-CVE-2026-103696","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks on sites that also run the WCFM Delivery add-on.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103696","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-103696","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103696"}
{"incident_id":"SEA-CVE-2026-103768","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart function. This is due to insufficient file type validation when saving IMAP email attachments. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103768","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-103768","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103768"}
{"incident_id":"SEA-CVE-2026-103849","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103849","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-103849","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103849"}
{"incident_id":"SEA-CVE-2026-103889","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpvimage' parameter parameter.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter. This is due to missing authentication and nonce checks on the wp_loaded handler combined with no sanitization of the xpv_image POST parameter before it is echoed unescaped into a Dompdf-rendered HTML template with PHP execution enabled. This makes it possible for unauthenticated attackers to execute code on the server. The only nonce and authentication check in the handler is entirely enclosed in a block comment with no replacement, making the endpoint reachable via a single unauthenticated POST to any URL on the site.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103889","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-103889","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103889"}
{"incident_id":"SEA-CVE-2026-103896","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the…","organization":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the OptimizerWebPageCache project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and including, 2.34.5 This is due to the OptimizerWebPageCache::get_cache_file_dir() function concatenating raw, unsanitized $_GET parameter names and values into the on-disk cache path, and the cache_content() sink calling mkdir() and file_put_contents() on the result with no realpath containment check — unlike the sibling delete_page_cache(), which does perform one. This makes it possible for unauthenticated attackers to create arbitrary directories (mode 0777, recursively) outside the cache root and write a cached page into them. The write is LIMITED: the filename is always 'source.html', so the extension is fixed, and the content is the rendered page buffer rather than attacker-supplied data. PHP files cannot be written and code execution is not possible; the demonstrated impact is cache poisoning and arbitrary directory creation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103896","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-103896","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103896"}
{"incident_id":"SEA-CVE-2026-103903","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"An incorrect authorization vulnerability in the WinBox","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account permitted to use WinBox to obtain the authorization policy of a different existing account. The stage-one EC-SRP challenge and proof are verified using the attacker's account, while the independently supplied stage-two username is used to install the target account's privileges. By specifying a higher-privilege account such as admin, a low-privilege user can obtain a full administrative session without knowing the target account's password and can use that session to increase the privileges of the attacker's own account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103903","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-103903","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103903"}
{"incident_id":"SEA-CVE-2026-103946","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103946","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-103946","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103946"}
{"incident_id":"SEA-CVE-2026-103964","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'firstname' parameter.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'first_name' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator's full Cookie header, including wordpress_logged_in_ session cookies, from the suspension email sent during the administrator's authenticated request, enabling full session hijack and account takeover. Exploitation requires an administrator to perform the Suspend action against the attacker's account, which causes the plugin to synchronously compile and send the suspension email inside the administrator's authenticated HTTP request — making the administrator's session cookies available to the template engine at send time.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103964","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-103964","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103964"}
{"incident_id":"SEA-CVE-2026-103988","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped,…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not independently authorize a changed destination parent. A qualifying user who owns a source folder can move that tree beneath another user's existing folder or into the root namespace, and the operation rekeys the moved ownership and ACL records to the new path. The destination must be unused and existing victim files cannot be overwritten. Distinct pre-fix errors reveal whether a specifically guessed destination path exists, but disclose no directory listing or file contents. This issue is fixed in version 3.23.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103988","failure_patterns":"","capabilities":"auth.privileged_action;data.pii;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103988","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-103988"}
{"incident_id":"SEA-CVE-2026-104000","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The malicious payload is stored unconditionally because debug logging is enabled by default, and the debug-log viewer is accessible to anyone holding the site-wide Support PIN (an HMAC-MD5 of AUTH_SALT displayed in wp-admin), meaning the injected script will execute against the administrator's session during ordinary support or troubleshooting workflows.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104000","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104000","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104000"}
{"incident_id":"SEA-CVE-2026-104001","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes. A Subscriber-level user need only save the shortcode payload to their own Biographical Info field via the REST API or wp-admin profile page; the shortcode then executes on any unauthenticated front-end request that resolves that author's description, such as requests using the ?author= query parameter when auto_redirection is disabled.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104001","failure_patterns":"SEA-FM-004;SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":true,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104001","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104001"}
{"incident_id":"SEA-CVE-2026-104003","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5. This is due to the get_user_profile_structure() function assembling the front-end profile buffer — which includes raw comment excerpts inlined by author_comment_query() — and passing the entire buffer to do_shortcode() after only a narrow neutralization pass (ppress_neutralize_buffer_shortcodes) that blocks pp-custom-html and bracket fragments containing HTML delimiters but leaves any other well-formed shortcode intact. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary shortcodes (from any active plugin or theme) with attacker-chosen attributes by posting a comment whose body contains the shortcode markup; the shortcode is then executed server-side when any visitor loads the target's front-end profile Comments tab, letting the attacker reach capability-gated or data-returning shortcodes and inject raw HTML markup into a publicly viewable page.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104003","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104003","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104003"}
{"incident_id":"SEA-CVE-2026-104021","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettings[cachecookieexclude][] parameter.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcache_settings[cache_cookie_exclude][] parameter. This is due to the plugin registering the cache_cookie_exclude setting via register_setting() without a sanitize_callback, while buildSiteHtaccessRules() applies only trim() to each cookie value before interpolating it directly into an Apache RewriteCond line — a normalization that strips surrounding whitespace but leaves embedded newlines intact, allowing an attacker to break out of the capture group and append arbitrary directives. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary Apache directives into the site's .htaccess file via file_put_contents(), enabling server-level configuration changes such as setting php_value auto_prepend_file to execute attacker-controlled PHP code on every request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104021","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104021","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104021"}
{"incident_id":"SEA-CVE-2026-104022","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3.","organization":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the addchild() function calling addrole('academystudent') on any existing account resolved from the attacker-supplied email parameter before Store project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the add_child() function calling add_role('academy_student') on any existing account resolved from the attacker-supplied email parameter before Store::link() validates the guardian-ward relationship, and failing to roll back that role write when Store::link() returns a WP_Error. This makes it possible for authenticated attackers with the academy_guardian role or higher to elevate any existing WordPress account — including their own — to the academy_student role, gaining edit_posts (Contributor-equivalent) capabilities and, when the student file-upload setting is enabled, upload_files (Author-equivalent) capabilities not granted to the guardian role. When a guardian supplies their own email address, email_exists() resolves to their own user ID, causing Store::link() to reject the self-link, but because the add_role() call has already executed and is never reversed, the academy_student role grant on their own account persists permanently.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104022","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii;data.uploaded_files;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-104022","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104022"}
{"incident_id":"SEA-CVE-2026-104023","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficient escaping on the user supplied parameter…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104023","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-104023","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104023"}
{"incident_id":"SEA-CVE-2026-104024","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, gridobjopen) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a…","organization":"Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, gridobjopen) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary command, with no confirmation dialog. The prompt (Do you want to run this file?) is gated by SECEXTCONST, a hard-coded list of seven extensions (exe cmd msi bat ps1 vbs reg); the check is an exact string comparison of the entry extension against that list, so it answers only whether the extension is one of the seven and never whether the shell will execute the file. Shell-executable and scripting-host types that Windows runs through ShellExecuteW are absent from the list, among them .url and .lnk. An archived Windows Internet Shortcut (.url) whose URL line is attacker-controlled is launched with no prompt, while the byte-identical content in an entry named .bat does raise the warning in the same session. A .lnk entry raises the ceiling from launching a program to running a command line, because a Windows shortcut carries arguments project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, grid_obj_open) in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary command, with no confirmation dialog. The prompt (Do you want to run this file?) is gated by SECEXTCONST, a hard-coded list of seven extensions (exe cmd msi bat ps1 vbs reg); the check is an exact string comparison of the entry extension against that list, so it answers only whether the extension is one of the seven and never whether the shell will execute the file. Shell-executable and scripting-host types that Windows runs through ShellExecuteW are absent from the list, among them .url and .lnk. An archived Windows Internet Shortcut (.url) whose URL line is attacker-controlled is launched with no prompt, while the byte-identical content in an entry named .bat does raise the warning in the same session. A .lnk entry raises the ceiling from launching a program to running a command line, because a Windows shortcut carries arguments: a proof-of-concept shortcut targeting cmd.exe with an attacker-chosen command line executed with no prompt. The shortcut target is not confined to the local disk; the shell also resolved an attacker-named UNC path (fetching a remote payload was only attempted, not demonstrated). No privilege escalation; everything runs as the user who opened the archive.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104024","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104024","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104024"}
{"incident_id":"SEA-CVE-2026-104028","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104028","failure_patterns":"SEA-FM-002","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104028","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104028"}
{"incident_id":"SEA-CVE-2026-104077","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which…","organization":"Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the Slides core plugin, allowing a javascript project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the Slides core plugin, allowing a javascript: URL to execute in the resulting background iframe. Because Node integration is enabled and context isolation is disabled in Obsidian's vault renderer, the injected script can call parent.require() to access Node APIs such as fs and child_process, enabling arbitrary operating system command execution when the victim opens the note and manually starts the presentation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104077","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104077","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104077"}
{"incident_id":"SEA-CVE-2026-104081","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"KodExplorer before 4.55 contains a path traversal vulnerability in the unzipprename() function within app/function/helper.function.php, where a single non-recursive strreplace() sanitization pass can be bypassed using…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/helper.function.php, where a single non-recursive str_replace() sanitization pass can be bypassed using crafted filenames like \"....//\", combined with PclZip's extract() call in KodArchive.class.php lacking the PCLZIP_OPT_EXTRACT_DIR_RESTRICTION option. Authenticated attackers can upload a malicious ZIP archive with traversal sequences to overwrite arbitrary files such as core JavaScript assets, enabling stored XSS that leads to admin account takeover and subsequent remote code execution via unrestricted PHP file upload.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104081","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii;data.untrusted_external_text;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104081","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104081"}
{"incident_id":"SEA-CVE-2026-104084","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed through POST /api/v1/auth/refresh-token. Attackers who capture a refresh token issued before an administrator demotion, or a demoted user whose session was not actively polling at the time of demotion, can replay the stale token to obtain a new access token retaining the higher-privilege role (such as DomainAdmin or SysAdmin) until natural token expiry.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104084","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104084","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104084"}
{"incident_id":"SEA-CVE-2026-104105","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded. An attacker who has the target account's valid primary credential and captures a TOTP code after its successful use can replay that code from another pending-login session before the window closes. The issue does not by itself disclose the primary credential or TOTP code. This issue is fixed in version 3.23.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104105","failure_patterns":"SEA-FM-012","capabilities":"data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104105","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104105"}
{"incident_id":"SEA-CVE-2026-104106","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF token to disable TOTP without recent…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF token to disable TOTP without recent full reauthentication or to begin enrollment when the account currently has no TOTP secret. The enrollment endpoint returns 409 rather than directly overwriting an already configured secret, but it persists and activates a newly generated secret before a TOTP code verifies possession. An attacker controlling an existing authenticated session can therefore disable an existing second factor or enroll one after the account has no configured secret; this is not a direct overwrite of an active authenticator. This issue is fixed in version 3.23.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104106","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104106","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104106"}
{"incident_id":"SEA-CVE-2026-104107","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot-dot segments in its attacker-controlled folder input before ACL inheritance evaluates the uncanonicalized string. With an authenticated non-administrator session, a valid CSRF token, and inherited edit permission on a legitimate ancestor, the local filesystem or WebDAV adapter later resolves those segments as path navigation, permitting attacker-controlled file creation outside the authorized folder and, where backend credentials permit, outside the configured WebDAV root. Local storage also created directories before final containment validation and used a prefix comparison that accepted similarly named sibling roots. This issue is fixed in version 3.23.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104107","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104107","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104107"}
{"incident_id":"SEA-CVE-2026-104112","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, switcher() in usr/src/cmd/nscd/nscd_frontend.c, does not close file descriptors that are passed with a door call but not used by the request, and the main nscd door at /var/run/name_service_door accepts passed descriptors from any user in its zone. Because nscd also runs with an unlimited file descriptor limit, an unprivileged local user, including one in a non-global zone, can repeatedly pass a descriptor to its zone's nscd in a door_call() loop, causing the file descriptor table of nscd to grow without bound in kernel memory. This causes a denial of service of nscd and can render processes in all zones on the host unresponsive. The flaw has existed since 2006 (illumos-gate commit cb5caa98), and affects any illumos distribution prior to illumos-gate commit af810a72.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104112","failure_patterns":"SEA-FM-006","capabilities":"data.pii;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-104112","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104112"}
{"incident_id":"SEA-CVE-2026-104113","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmthandler() in…","organization":"A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmthandler() in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c frees the caller's credential with ucredfree() immediately after reading the user ID, and frees it a second time on the error path if the authorization check fails. An unprivileged local user who does not hold the solaris.network.interface.config authorization can send such a request, for example IPMGMTCMDRESETIF, to the ipmgmtd door, causing ipmgmtd to abort; repeated requests place the svc project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configuration, ipmgmt_handler() in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmt_door.c frees the caller's credential with ucred_free() immediately after reading the user ID, and frees it a second time on the error path if the authorization check fails. An unprivileged local user who does not hold the solaris.network.interface.config authorization can send such a request, for example IPMGMT_CMD_RESETIF, to the ipmgmtd door, causing ipmgmtd to abort; repeated requests place the svc:/network/ip-interface-management service into maintenance, preventing IP interface configuration. The early free was introduced in 2014 to support lx-branded zones (OmniOS commit 4c170900) and is not present in upstream illumos-gate. It affects OmniOS r151020 and later, and SmartOS, prior to the fix.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104113","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104113","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104113"}
{"incident_id":"SEA-CVE-2026-104114","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamddoorswitch() in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure…","organization":"A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamddoorswitch() in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's credentials. Because the nwamd door at /etc/svc/volatile/nwam/nwamdoor is accessible to all local users, an unprivileged user can issue a doorcall() with no argument data to crash nwamd; repeated calls place the svc project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamd_door_switch() in usr/src/cmd/cmd-inet/lib/nwamd/door_if.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's credentials. Because the nwamd door at /etc/svc/volatile/nwam/nwam_door is accessible to all local users, an unprivileged user can issue a door_call() with no argument data to crash nwamd; repeated calls place the svc:/network/physical:nwam service into maintenance, stopping automatic network configuration. nwamd runs only when svc:/network/physical:nwam is enabled, which is not the default. The flaw has existed since 2010 (illumos-gate commit 6ba597c5), and affects any illumos distribution prior to illumos-gate commit 0f1064d9.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104114","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104114","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104114"}
{"incident_id":"SEA-CVE-2026-104115","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. getfslocations() in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin,…","organization":"A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. getfslocations() in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte stack buffer without checking their length. The reparsed door at /var/run/reparseddoor is readable by all users and the door server does not check the caller's credentials, so an unprivileged local user can send an nfs-basic request with an overlong host or path component to overflow the buffer. On systems built with stack protection, which is the default, this causes reparsed to abort; repeated requests place the svc project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. get_fs_locations() in usr/src/cmd/fs.d/nfs/rp_basic/libnfs_basic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte stack buffer without checking their length. The reparsed door at /var/run/reparsed_door is readable by all users and the door server does not check the caller's credentials, so an unprivileged local user can send an nfs-basic request with an overlong host or path component to overflow the buffer. On systems built with stack protection, which is the default, this causes reparsed to abort; repeated requests place the svc:/system/filesystem/reparse service into maintenance. The service is disabled by default. The flaw has existed since 2009 (illumos-gate commit 2f172c55), and affects any illumos distribution prior to illumos-gate commit 6a2df4aa.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104115","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104115","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104115"}
{"incident_id":"SEA-CVE-2026-104116","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are running. The zonestatd door server procedure, zsd_server() in usr/src/cmd/zonestat/zonestatd/zonestatd.c, handles the ZSD_CMD_NEW_ZONE command, which is intended to be sent by zoneadmd, without checking the caller's credentials. Because the zonestatd door is accessible to all users in every zone, an unprivileged user can send this command with an arbitrary zone ID, causing zonestatd to re-create its door file in that zone, so that new zonestat requests in that zone can fail while the file is replaced. The time taken to handle the command also reveals whether a given zone ID belongs to a running zone. The flaw has existed since 2010 (illumos-gate commit efd4c9b6), and affects any illumos distribution prior to illumos-gate commit 865b58d2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104116","failure_patterns":"SEA-FM-003","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-104116","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104116"}
{"incident_id":"SEA-CVE-2026-104140","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping.","organization":"QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping. Attacker-controlled feature.properties values from a published writable vector layer reach resources/server/api/ogc/templates/wfs3/getFeatures.html through QgsServerOgcApiHandler project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTML responses without HTML escaping. Attacker-controlled feature.properties values from a published writable vector layer reach resources/server/api/ogc/templates/wfs3/getFeatures.html through QgsServerOgcApiHandler::htmlDump and the if_nullptr_null_str callback. A user who opens an items HTML page can execute stored markup or script in the QGIS Server origin, which can expose the viewer's session data or issue authenticated requests with the viewer's privileges. This issue is fixed in version 3.44.12.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104140","failure_patterns":"","capabilities":"data.pii;arch.content_ingestion_rag","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104140","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104140"}
{"incident_id":"SEA-CVE-2026-104141","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvider inserts these identifiers into metadata queries that are executed through a plain JDBC Statement, allowing the generated SQL to be altered and run against the configured backend with application-held datasource credentials. The issue can compromise the confidentiality, integrity, and availability of the connected database without requiring a victim action.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104141","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104141","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104141"}
{"incident_id":"SEA-CVE-2026-104198","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken() returns false when a token is malformed or has an invalid signature, but the caller assigns that value to the global $user variable; because web/index.php tests isset($user), boolean false is treated as a present user and the normal login redirect is skipped. This can dispatch views that rely on the outer authentication gate, including the zones view, which accepts an attacker-selected monitor ID and discloses monitor and zone metadata without an independent permission check. Permission helpers receive the false user value and deny privileged operations, so unauthorized state changes have not been established. This vulnerability is fixed in version 1.36.63, where conversion to ZM\\User objects causes invalid token state to fail before view dispatch. Later defense-in-depth changes explicitly leave $user unset after failed token validation and reject non-ZM\\User values at the web authentication gate.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104198","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104198","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104198"}
{"incident_id":"SEA-CVE-2026-104332","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104332","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-104332","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104332"}
{"incident_id":"SEA-CVE-2026-104355","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them.","organization":"A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote clusters an administrator has registered with connection enabled; the sending side excludes local namespaces, but the receiving side does not apply the same rule. When an inbound task names an existing namespace, the server checks at most that the namespace identifiers match, then overwrites its state, description, owner, retention, archival settings, and cluster list, and its active cluster when the task carries a higher failover version, without checking that the namespace is global. A party that controls a registered peer's replies, by operating or compromising it, can therefore change any local namespace whose name and identifier it can supply, without any credential on the receiving cluster project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace replication updates to them. In a multi-cluster deployment, each cluster pulls replication tasks from the remote clusters an administrator has registered with connection enabled; the sending side excludes local namespaces, but the receiving side does not apply the same rule. When an inbound task names an existing namespace, the server checks at most that the namespace identifiers match, then overwrites its state, description, owner, retention, archival settings, and cluster list, and its active cluster when the task carries a higher failover version, without checking that the namespace is global. A party that controls a registered peer's replies, by operating or compromising it, can therefore change any local namespace whose name and identifier it can supply, without any credential on the receiving cluster: for example, marking it Deprecated, making the peer its active cluster, and shortening its retention, after which new Workflow starts in that namespace fail. Local namespaces include the built-in temporal-system namespace. Namespace metadata the History service refreshes from the peer while processing its history replication tasks passes through the same logic. A cluster with no remote cluster registered with connection enabled is not exposed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104355","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.infrastructure_modification;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104355","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104355"}
{"incident_id":"SEA-CVE-2026-104364","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104364","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-104364","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104364"}
{"incident_id":"SEA-CVE-2026-104585","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104585","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104585","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104585"}
{"incident_id":"SEA-CVE-2026-104586","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104586","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104586","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104586"}
{"incident_id":"SEA-CVE-2026-104629","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, and this code runs with the privileges of the affected service account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104629","failure_patterns":"","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104629","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104629"}
{"incident_id":"SEA-CVE-2026-104645","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any authenticated user with contributor-level access or above to clone, modify and reorder galleries and images belonging to other users and to write Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 metadata onto arbitrary posts they do not own.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104645","failure_patterns":"","capabilities":"auth.write_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104645","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104645"}
{"incident_id":"SEA-CVE-2026-104646","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline…","organization":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the session of anyone viewing the post, including an administrator previewing a pending submission. No gallery ownership is required project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the session of anyone viewing the post, including an administrator previewing a pending submission. No gallery ownership is required: any gallery that already exists on the site can be referenced.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104646","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104646","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104646"}
{"incident_id":"SEA-CVE-2026-104658","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Linux live-update apply helper (hmailserver-update) of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Linux live-update apply helper (hmailserver-update) of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit to stop before reading the service account's files. An attacker who already runs code as the hmailserver service account, for example through another flaw in the mail server, can therefore have arbitrary code executed as root, on any Linux installation where the live update's path unit is active - the default for the project's .deb and .rpm packages - and on AppImage installations run under that unit.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104658","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104658","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104658"}
{"incident_id":"SEA-CVE-2026-104660","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Missing authorization on COM objects in Progressive Robot hMailServer 6.0.0 through 6.3.5 (Windows only) lets a local interactive user with no hMailServer credential read and write arbitrary files as the service account…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Missing authorization on COM objects in Progressive Robot hMailServer 6.0.0 through 6.3.5 (Windows only) lets a local interactive user with no hMailServer credential read and write arbitrary files as the service account and queue mail as any sender. The service registers its COM classes with no DCOM access or launch permission and calls CoInitializeSecurity with no security descriptor, so any user logged on at the console or over Remote Desktop can activate the classes in the running service; a hMailServer.Message, its Attachments and Attachment, and a hMailServer.FetchAccount created this way carry a credential that never authenticated. Attachments.Add(path) and Attachment.SaveAs(path) performed no authorization check, and Message.Save/Copy and FetchAccount.AccountID/Save performed none either up to 6.3.3 and from 6.3.4 treated a holder with no credential as the server's own event-script host. Because the service does not impersonate the COM caller, Attachments.Add reads any file the service account can read and returns it, Attachment.SaveAs writes attacker-chosen bytes to any path it can write (on a LocalSystem installation, code execution as SYSTEM), Message.Save queues outbound mail from any address past the SMTP checks, and FetchAccount attaches a mail-fetch job to any mailbox. The objects an Application handed out behave the same once a later Authenticate on that Application fails.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104660","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets;data.uploaded_files;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104660","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104660"}
{"incident_id":"SEA-CVE-2026-104661","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure and execute a specially crafted compliance pipeline across group projects due to improper privilege assignment.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104661","failure_patterns":"","capabilities":"auth.code_execution;data.pii;data.regulated_records","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104661","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104661"}
{"incident_id":"SEA-CVE-2026-104680","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does not restrict the installation to its own curated list, allowing a Multisite subsite Administrator to install an arbitrary WordPress.org-published Envira Gallery WordPress plugin before 1.16.2 into the network-shared Envira Gallery WordPress plugin before 1.16.2 directory, a privilege Multisite reserves for the network Super Admin.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104680","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104680","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104680"}
{"incident_id":"SEA-CVE-2026-104682","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing users with contributor-level access to create and publish gallery posts that the Envira Gallery WordPress plugin before 1.16.2's settings otherwise withhold from them.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104682","failure_patterns":"","capabilities":"auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104682","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104682"}
{"incident_id":"SEA-CVE-2026-104715","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104715","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104715","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104715"}
{"incident_id":"SEA-CVE-2026-104722","evidence_tier":"security_advisory","title":"The Listdom issue could allow unintended commands to run","summary":"The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSDMenusIXCSV::import function in all…","organization":"The Listdom project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSD_Menus_IX_CSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticated attackers, with administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104722","failure_patterns":"SEA-FM-004;SEA-FM-002","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action","is_ai_system":true,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104722","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104722"}
{"incident_id":"SEA-CVE-2026-104723","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input .","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. This vulnerability is only exploitable during lesson creation when a temporary lesson ID triggers the custom metadata path, and requires the attacker to hold a role with the edit_course capability, such as Instructor, Instructor's Assistant, LMS Manager, or Administrator.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104723","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.destructive_action;auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-104723","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104723"}
{"incident_id":"SEA-CVE-2026-104724","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Condition in all versions up to, and including, 3.1.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. On fresh installations of version 3.1.10 and later, exploitation requires administrator-level access; however, on sites upgraded from a version prior to 3.1.10, the preserveCampaignRoleAccess() migration grants the edit_fireboxes capability to any role that previously held edit_posts, reducing the minimum required privilege to Author-level.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104724","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-104724","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104724"}
{"incident_id":"SEA-CVE-2026-104725","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on the user parameter within the process_edit() function, which allows any authenticated user with the edit_contacts capability to reassign a contact record's linked WordPress user ID to any arbitrary account without requiring the edit_users or promote_users capabilities. This makes it possible for authenticated attackers, with sales_rep-level access and above, to escalate their privileges to administrator by linking a contact to an administrator's WordPress user ID, then creating a note containing the {auto_login_link} replacement tag to trigger generation of a valid auto-login permissions-key URL for the administrator-linked contact, and finally visiting that URL to authenticate as the targeted administrator. The auto-login URL is stored in the note content and is readable back by the attacker via the view_notes and add_notes capabilities that the sales_rep role holds by default.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104725","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-104725","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104725"}
{"incident_id":"SEA-CVE-2026-104728","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to enumerate all Fluent Forms records, including form IDs and titles, from the fluentform_forms database table.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104728","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.pii;arch.event_driven","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-104728","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104728"}
{"incident_id":"SEA-CVE-2026-104730","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. If a POP chain is present via an additional plugin or theme installed on the target system, the attacker can store the malicious payload unauthenticated via the public favorites page and trigger deserialization by viewing any image in a non-viewable or private gallery.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104730","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.destructive_action;auth.write_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-104730","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104730"}
{"incident_id":"SEA-CVE-2026-104732","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because handleloginaction() performs no server-side check — via…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because handle_login_action() performs no server-side check — via transient, session marker, or equivalent — that a requester completed step-1 password authentication before processing a step-2 TOTP submission for the POSTed user_id; compounding this, an error branch in the function unconditionally mints a fresh advaipbl-2fa-interim-{user_id} nonce and delivers it in a Location header to any unauthenticated caller, after which display_2fa_login_form_step_2() renders a valid advaipbl-2fa-verify-{user_id} nonce in HTML — both nonces computed against a fixed uid=0 empty-session context and therefore fully reusable by the attacker across subsequent requests. This makes it possible for unauthenticated attackers to bypass authentication entirely for any 2FA-enabled account, including administrators, by brute-forcing an unthrottled 6-digit TOTP code (no attempt counter, no account lockout, and no wp_login_failed firing) and receiving a fully authenticated session cookie via wp_set_auth_cookie without ever supplying the account password, resulting in complete site takeover. Exploitation requires only a known user_id for an account that has the plugin's 2FA feature enabled.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104732","failure_patterns":"SEA-FM-003","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-104732","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104732"}
{"incident_id":"SEA-CVE-2026-104741","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global plugin indexing and vector-search configuration options (aipkit_training_general_settings and aipkit_indexing_field_settings), including chunking parameters, file upload visibility, and per-CPT field indexing settings, affecting all users of the plugin. This is only exploitable in configurations where an administrator has granted 'sources' module access to a lower-privileged role via the plugin's Role Manager.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104741","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.uploaded_files;arch.content_ingestion_rag","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-104741","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104741"}
{"incident_id":"SEA-CVE-2026-104742","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global site-wide semantic search settings, including vector provider, embedding provider, embedding model, target ID, number of results, and no-results text stored in aipkit_options, that are otherwise restricted to administrators. Exploitation requires that an administrator has previously granted the Knowledge Base ('sources') module to the attacker's role via the Role Manager, as this access is not available to lower-privileged users by default.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104742","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii;arch.content_ingestion_rag","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-104742","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104742"}
{"incident_id":"SEA-CVE-2026-104748","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the wp_ajax_nopriv_simpleform_wp_register AJAX action lacking any capability check for role assignment and the save_custom_fields_to_user_meta() function using an exclusion list that omits wp_capabilities, combined with get_form_settings() returning a hard-coded defaults array that unconditionally enables meta writing regardless of the supplied form_id. This makes it possible for unauthenticated attackers to create a new Administrator-level WordPress account by supplying wp_capabilities[administrator]=1 alongside standard registration fields. The nonce required by the endpoint is publicly emitted into the front_end_data JavaScript object on every front-end page via wp_enqueue_scripts, making it trivially obtainable by any unauthenticated visitor before submitting the malicious request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104748","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-104748","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104748"}
{"incident_id":"SEA-CVE-2026-104752","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-level access to upload a PHP file and achieve remote code execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104752","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104752","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104752"}
{"incident_id":"SEA-CVE-2026-104753","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104753","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-104753","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104753"}
{"incident_id":"SEA-CVE-2026-104754","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by default) to store JavaScript that executes in the session of any user who later opens that view, including a Super Administrator on multisite.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104754","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104754","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104754"}
{"incident_id":"SEA-CVE-2026-104755","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the startcomms…","organization":"The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the startcomms dispatcher (wpsiccomms project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the start_comms dispatcher (wps_ic_comms::start_comms), hooked on every front-end request, gates access only by comparing the caller-supplied apikey parameter against the stored plugin API key with no WordPress capability check and no nonce verification, then passes the unvalidated group, setting, and value parameters directly to change_setting(), which writes them into the WPS_IC_SETTINGS option without an allow-list. This makes it possible for unauthenticated attackers to write arbitrary permission keys into the plugin's settings, causing wps_ic_users::checkAndAddCaps() to grant any WordPress role — including Subscriber — the manage_wpc_settings capability and thereby achieve plugin-administrator-equivalent control over the plugin's optimization, CDN, and critical-CSS surfaces. The API key required to pass the authorization check can itself be obtained without authentication via the wpc_send_critical_remote nopriv AJAX action: when the external critical-CSS service returns an apiResults field, initCritical() echoes the stored plugin API key back to the caller in a wp_send_json_success response, completing the exploit chain entirely without a WordPress login.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104755","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.infrastructure_modification;auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-104755","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104755"}
{"incident_id":"SEA-CVE-2026-104759","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to…","organization":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to IdTokenServiceDeprecated project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, and including, 44.1 This is due to Id_Token_Service_Deprecated::process_openidconnect_token() using the incompatible WordPress core wp_verify_nonce() function to validate a nonce produced by Nonce_Service::create_nonce() — a 64-character hex value that wp_verify_nonce() can never successfully verify — causing the nonce check to silently fail without terminating authentication, so execution continues into authenticate_oidc_user() with the attacker-supplied id_token. This makes it possible for unauthenticated attackers who have obtained a previously-issued, valid id_token for a target account to replay that token and authenticate as any WordPress user, including administrators, resulting in full site takeover. This vulnerability is only exploitable when the use_id_token_parser_v2 plugin option is enabled, as this is the configuration that routes token processing through the deprecated parser containing the broken nonce check.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104759","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-104759","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104759"}
{"incident_id":"SEA-CVE-2026-104763","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'filepath' parameter parameter.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. This requires the attacker to upload a crafted ZIP archive containing a media_metadata.json file with path traversal sequences in the file_path field while specifying an allowed file extension for the destination filename to bypass the extension guard introduced in version 1.13.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104763","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-104763","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104763"}
{"incident_id":"SEA-CVE-2026-104764","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input .","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104764","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.destructive_action;auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-104764","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104764"}
{"incident_id":"SEA-CVE-2026-104766","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3.","organization":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the OsSettingsController project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the OsSettingsController::update() handler iterating over attacker-supplied settings parameters without an allowlist of permitted setting names or values, and OsSettingsHelper::prepare_value() performing no role allowlist validation before persisting the default_wp_role_for_customer setting — a restriction that exists only in the UI dropdown and is never enforced server-side. This makes it possible for authenticated attackers holding a LatePoint role with the settings__edit capability (such as an agent or custom role) to overwrite the default WordPress role for new customers with administrator, causing any subsequently self-registered LatePoint customer account to be created with full WordPress administrator privileges. Exploitation requires that a WordPress administrator has granted the settings__edit capability to a LatePoint agent or custom role, and that a new customer account is registered through LatePoint after the malicious setting change is persisted.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104766","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"auth.privileged_action;auth.write_action;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-104766","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104766"}
{"incident_id":"SEA-CVE-2026-104767","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the maybe_add_role_to_user() function unconditionally re-assigning every role stored in the dfxwcrc_foreign_roles user meta cache without verifying that each cached role is still actively assigned by the external provider — a condition made permanent by remember_foreign_roles(), which merges new foreign roles into the cache but never evicts roles that have since been revoked. This makes it possible for authenticated attackers with subscriber-level access and above to restore a previously revoked Administrator role to their own account, gaining full administrative control of the site, by triggering any role-assignment event such as completing a purchase for a role-mapped product. Exploitation requires Replace Roles mode to be enabled and the attacker's account to have previously received Administrator legitimately through a separate role-management mechanism while the plugin was active, so that administrator was written into the dfxwcrc_foreign_roles user meta cache before the external provider revoked it.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104767","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii;arch.caching;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-104767","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104767"}
{"incident_id":"SEA-CVE-2026-104797","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The adfoin_ultimatememberac_send_data function, which powers the Ultimate Member \"Update Profile Field\" action, resolves the target WordPress user from an attacker-supplied email address and passes an attacker-controlled field key and value directly to UM()->user()->update_profile() in the account context — which explicitly bypasses Ultimate Member's banned-key validation — without performing any submitter identity verification, ownership check, capability check, current-password reauthentication, or restriction on sensitive keys such as user_pass. This makes it possible for unauthenticated attackers to change the password of any WordPress user account, including Administrator accounts, by submitting a public Contact Form 7 form with a target email and user_pass as the field key, enabling full site takeover. Exploitation requires an administrator to have pre-configured a Contact Form 7 integration that maps the target email, field key, and value from public form inputs to the Ultimate Member Update Profile Field action — the exact workflow the plugin's own UI advertises for this action type.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104797","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;auth.public_publication;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-104797","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104797"}
{"incident_id":"SEA-CVE-2026-104800","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter. This is due to missing authentication, capability checks, and nonce verification on the standalone admin.php endpoint, combined with unsanitized injection of POST parameters directly into generated PHP source written to an included file. This makes it possible for unauthenticated attackers to execute code on the server. This is possible because admin.php does not load WordPress and carries no ABSPATH guard, making it a fully unauthenticated entry point regardless of the decorative capability arguments registered via the plugin's simulated menu API.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104800","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104800","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104800"}
{"incident_id":"SEA-CVE-2026-104801","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the renamefiles function in all versions up to, and…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the rename_files function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The relocated file is moved byte-identically into the publicly accessible wp-content/uploads/ppom_files/confirmed/ directory, meaning the attack also results in arbitrary file read for any web-readable file on the server.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104801","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104801","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104801"}
{"incident_id":"SEA-CVE-2026-104803","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the uuid and code parameters of the social-login callback handler registered on the init hook.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the uuid and code parameters of the social-login callback handler registered on the init hook. The vulnerability exists because the login function's social-login flow performs no nonce validation, no OAuth state verification, and no per-visitor namespace isolation in the session store, allowing an unauthenticated attacker to issue a crafted GET request that writes an attacker-named, attacker-valued entry into the global session namespace (bypassing the per-visitor prefix by prepending an underscore), then issue a second GET request triggering weapp_new_user() to read that forged entry and resolve the attacker-supplied openid value to a bound WordPress account before wp_set_auth_cookie() establishes a fully authenticated session. This makes it possible for unauthenticated attackers to log in as any WordPress user — including administrators — whose bound social provider identifier (openid/unionid) is known or discoverable. Successful exploitation requires that the target site has at least one social provider configured (which activates the vulnerable handler) and that the attacker knows or can enumerate the victim account's bound openid or unionid.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104803","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-104803","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104803"}
{"incident_id":"SEA-CVE-2026-104898","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wpuserid' parameter due to…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wp_user_id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the WordPress account binding of any Bookly staff record, including those owned by administrators, effectively hijacking a higher-privileged staff member's account association and escalating privileges. Exploitation requires the attacking user to be linked to at least one Bookly staff record, which occurs by default whenever an admin enables the bookly_gen_allow_staff_edit_profile option (active on fresh installs) and links a WordPress user to a staff entry.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104898","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104898","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104898"}
{"incident_id":"SEA-CVE-2026-104899","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'design_type' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. The required nonce is trivially obtainable by any anonymous visitor, as the geodir_basic_nonce value is localized to every public frontend page via the geodir_params script object, meaning no authentication, user interaction, or specific site content is required to exploit this vulnerability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104899","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104899","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104899"}
{"incident_id":"SEA-CVE-2026-104909","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the 'type (e.g. footype)' parameter parameter.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation is trivial via an unauthenticated POST to any page rendering a public [mb_board] shortcode, as no nonce or capability check is enforced on the shortcode render path; on servers with a standard PHP installation, pearcmd.php can be leveraged to write and then include an attacker-controlled payload file in a single request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104909","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-104909","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104909"}
{"incident_id":"SEA-CVE-2026-104915","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to permanently delete arbitrary Academy lesson comments and their replies authored by any user, including administrators, across courses they do not instruct. This is exploitable by any user registered as an Academy instructor for at least one course, as they can supply their own course_id to pass the instructor check while targeting comments belonging to entirely different courses.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104915","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-104915","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104915"}
{"incident_id":"SEA-CVE-2026-104932","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replaceall function.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authenticated attackers, with subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104932","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-104932","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104932"}
{"incident_id":"SEA-CVE-2026-104939","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire…","organization":"Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authentication can happen. Impact This vulnerability may allow remote attackers unauthenticated access to protected paths. There is no control plane exposure; this is a data plane issue only. Note project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external authentication can happen. Impact This vulnerability may allow remote attackers unauthenticated access to protected paths. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104939","failure_patterns":"","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104939","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-104939"}
{"incident_id":"SEA-CVE-2026-105009","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105009","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105009","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105009"}
{"incident_id":"SEA-CVE-2026-105034","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that device against the cloud services.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105034","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105034","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105034"}
{"incident_id":"SEA-CVE-2026-105037","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105037","failure_patterns":"SEA-FM-012","capabilities":"auth.code_execution;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-105037","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105037"}
{"incident_id":"SEA-CVE-2026-105039","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105039","failure_patterns":"","capabilities":"auth.code_execution;auth.write_action;data.pii;data.uploaded_files","is_ai_system":true,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105039","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105039"}
{"incident_id":"SEA-CVE-2026-105076","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105076","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-105076","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105076"}
{"incident_id":"SEA-CVE-2026-105107","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script (sub calculate) concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.pl script (sub calculate) concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an allow-list, so it is inserted verbatim into identifier positions (SELECT DISTINCTROW, GROUP BY, ORDER BY, and the main calculation query). Filter values are concatenated raw into single-quoted LIKE, BETWEEN, and comparison fragments. Limit is appended raw to a LIMIT clause. An authenticated staff user with the reports module permission (not requiring superlibrarian) can inject arbitrary SQL and read any table reachable by the Koha database user, including borrowers (userid and bcrypt password hashes, two-factor secrets, personal data), api_keys, and sessions. The issue is fixed in Koha 24.11.19, 25.05.14, 25.11.08, and 26.05.03, and in the 26.11 development branch. This is the unpatched twin of reports/bor_issues_top.pl (CVE-2026-70372).","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105107","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-105107","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105107"}
{"incident_id":"SEA-CVE-2026-105190","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled. The created account receives the site's default role.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105190","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105190","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105190"}
{"incident_id":"SEA-CVE-2026-105195","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site configuration.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105195","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105195","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105195"}
{"incident_id":"SEA-CVE-2026-105196","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally restricted to their own records, to read and modify other agents' profile data and read other agents' bookings and associated customer details when the Abilities API feature is enabled.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105196","failure_patterns":"SEA-FM-010","capabilities":"auth.write_action;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105196","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105196"}
{"incident_id":"SEA-CVE-2026-105236","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same…","organization":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there. A server that serves several SNI names from one listen socket through snifun or snihosts keeps one pre-TLS 1.3 session cache per listener and does not bind a cached session to the SNI name or client trust policy that established it. When an SNI option set switches to verifypeer without naming reusesessions, sslconfig project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual host on the same listener by resuming its TLS 1.2 session there. A server that serves several SNI names from one listen socket through sni_fun or sni_hosts keeps one pre-TLS 1.3 session cache per listener and does not bind a cached session to the SNI name or client trust policy that established it. When an SNI option set switches to verify_peer without naming reuse_sessions, ssl_config:update_options/3 inherits the base listener's reuse_sessions value of true, so the default that disables reuse for client-authenticating servers does not apply. On an abbreviated handshake ssl_session:is_resumable/4 checks only that the cached session uses one of the current server certificates and carries some peer certificate, and never revalidates that certificate against the CA selected for the requested name. The names must share a server certificate, which is common with wildcard or multi-SAN certificates. TLS 1.3 does not use this cache and is not affected. This issue affects OTP from OTP 18.0 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to ssl from 7.0 before 11.2.12.14, 11.6.0.7, and 11.7.8.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105236","failure_patterns":"","capabilities":"arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105236","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105236"}
{"incident_id":"SEA-CVE-2026-105261","evidence_tier":"security_advisory","title":"Security issue reported in The Schedule Post Changes With PublishPress Future","summary":"The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and…","organization":"The Schedule Post Changes With PublishPress Future project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element allowlist on a shortcode attribute and does not neutralise attacker-controlled text placed inside the resulting element, allowing users with the Contributor role and above to store JavaScript that executes in the session of any higher-privileged user who views the content.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105261","failure_patterns":"","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105261","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105261"}
{"incident_id":"SEA-CVE-2026-105278","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface can authenticate using this credential and gain full administrative control of the application.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105278","failure_patterns":"SEA-FM-012","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-105278","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105278"}
{"incident_id":"SEA-CVE-2026-105331","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105331","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-105331","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105331"}
{"incident_id":"SEA-CVE-2026-105452","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values matched known sentinel values, so untrusted code in an authorized sandbox could supply an unrecognized credential in another supported authentication header. For affected upstream services, this could authenticate the request to an attacker-controlled account and expose data included in the request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105452","failure_patterns":"SEA-FM-012","capabilities":"auth.code_execution;auth.destructive_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-105452","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105452"}
{"incident_id":"SEA-CVE-2026-105458","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that bypasses governance controls, due to reliance on untrusted input in a security decision.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105458","failure_patterns":"SEA-FM-010","capabilities":"auth.privileged_action;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105458","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105458"}
{"incident_id":"SEA-CVE-2026-105464","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to improper privilege management.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105464","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105464","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105464"}
{"incident_id":"SEA-CVE-2026-105466","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105466","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-105466","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105466"}
{"incident_id":"SEA-CVE-2026-105474","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105474","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-105474","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105474"}
{"incident_id":"SEA-CVE-2026-105570","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider endpoint while bypassing response masking. If a user completed the OAuth flow, the provider's access and refresh tokens could be returned unmasked to the sandbox, exposing host-managed credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105570","failure_patterns":"SEA-FM-012","capabilities":"auth.code_execution;auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-105570","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105570"}
{"incident_id":"SEA-CVE-2026-105672","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"C325WB V2 contains an unauthenticated authorization bypass vulnerability in the","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without authentication. Successful exploitation may allow an unauthenticated adjacent-network attacker to access live video and audio, modify device settings, and obtain sensitive device information or secrets.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105672","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-105672","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105672"}
{"incident_id":"SEA-CVE-2026-105713","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105713","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-105713","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105713"}
{"incident_id":"SEA-CVE-2026-105825","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that process them using ImageMagick.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105825","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-105825","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105825"}
{"incident_id":"SEA-CVE-2026-105830","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan.","organization":"league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters, forcing repeated full-buffer strpos scans that exhaust PHP worker CPU.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105830","failure_patterns":"SEA-FM-006","capabilities":"arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-105830","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105830"}
{"incident_id":"SEA-CVE-2026-105889","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105889","failure_patterns":"SEA-FM-002","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-105889","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105889"}
{"incident_id":"SEA-CVE-2026-105897","evidence_tier":"security_advisory","title":"coldfusion issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"coldfusion project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105897","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-105897","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105897"}
{"incident_id":"SEA-CVE-2026-105900","evidence_tier":"security_advisory","title":"Security issue reported in coldfusion","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"coldfusion project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105900","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-105900","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105900"}
{"incident_id":"SEA-CVE-2026-105902","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105902","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-105902","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105902"}
{"incident_id":"SEA-CVE-2026-105973","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks when reordering form fields, allowing any authenticated user (Subscriber and above) to alter the field structure of any form on the site, persistently breaking its public rendering.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105973","failure_patterns":"","capabilities":"auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105973","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105973"}
{"incident_id":"SEA-CVE-2026-105974","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authenticated user (Subscriber and above) to read other users' submitted contact information, including names, email addresses, form titles and timestamps.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105974","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105974","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105974"}
{"incident_id":"SEA-CVE-2026-105976","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105976","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105976","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105976"}
{"incident_id":"SEA-CVE-2026-105977","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105977","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105977","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105977"}
{"incident_id":"SEA-CVE-2026-105989","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7's status metadata onto arbitrary posts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105989","failure_patterns":"","capabilities":"auth.financial_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105989","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105989"}
{"incident_id":"SEA-CVE-2026-105990","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthenticated attackers to download the personal data (name, email, telephone, postal address, message) and payment metadata of everyone who submitted a payment form.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105990","failure_patterns":"","capabilities":"auth.financial_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105990","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105990"}
{"incident_id":"SEA-CVE-2026-105995","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105995","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105995","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-105995"}
{"incident_id":"SEA-CVE-2026-106029","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106029","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106029","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106029"}
{"incident_id":"SEA-CVE-2026-106097","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network those belong to subsite Administrators, allowing a subsite Administrator who is not a network Super Admin to perform UNION-based SQL injection against shared network tables and disclose network-wide data such as other users' password hashes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106097","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-106097","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106097"}
{"incident_id":"SEA-CVE-2026-106098","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated attackers to modify data in an application exposed for anonymous read access even when update actions have been disabled by the administrator.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106098","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106098","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106098"}
{"incident_id":"SEA-CVE-2026-106099","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access WordPress plugin before 5.5.84 itself prints into the public pages on which it displays a table, allowing unauthenticated attackers to export the complete contents of any publicly displayed table, including columns and rows withheld from the display shown to visitors.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106099","failure_patterns":"","capabilities":"auth.write_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106099","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106099"}
{"incident_id":"SEA-CVE-2026-106126","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106126","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;arch.multi_tenant;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-106126","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106126"}
{"incident_id":"SEA-CVE-2026-106145","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server settings-synchronization event, the rogue agent receives storage settings and encryption private keys. This privilege escalation enables disclosure of protected secrets, including stored data-source credentials and connection strings, and allows agent impersonation and interference with task dispatch.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106145","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"data.pii;data.credentials_secrets;arch.event_driven;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-106145","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106145"}
{"incident_id":"SEA-CVE-2026-106155","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs…","organization":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views the malicious report and the embedded navigation is triggered, attacker-controlled script can execute in the web report viewer's origin. In a multi-user Report Server deployment, this can enable privilege escalation by performing actions in a higher-privilege user's authenticated session, including an administrator's session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106155","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-106155","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106155"}
{"incident_id":"SEA-CVE-2026-106166","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing its sequential identifier.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106166","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106166","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106166"}
{"incident_id":"SEA-CVE-2026-106430","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an affected application can cause the application to read distinct values from an unintended field or rename an unintended collection. These operations use the application's existing database credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106430","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-106430","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106430"}
{"incident_id":"SEA-CVE-2026-106433","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document, can cause invalid memory access and invalid frees in the client process. This can terminate the application or corrupt process memory.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106433","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106433","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106433"}
{"incident_id":"SEA-CVE-2026-106469","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allowing authenticated users with Contributor-level access and above to store malicious SVG that executes JavaScript in the session of any user who views or previews the affected form, such as an administrator reviewing a pending post.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106469","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106469","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106469"}
{"incident_id":"SEA-CVE-2026-106627","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106627","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-106627","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106627"}
{"incident_id":"SEA-CVE-2026-106700","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController. The method lacks the method-level authorization check applied to all other user-management endpoints and performs no role-level or ownership validation in UserServiceImpl.resetPwd. Any authenticated user of any role can reset the password of arbitrary users, including the built-in administrator.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106700","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-106700","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106700"}
{"incident_id":"SEA-CVE-2026-106705","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing…","organization":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither validates the granted menu set nor prevents a caller from modifying its own role. A logged-in non-admin user whose role holds the delegated roles project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) authorizes the request only by comparing the target role's level with the caller's minimum level. The application neither validates the granted menu set nor prevents a caller from modifying its own role. A logged-in non-admin user whose role holds the delegated roles:edit permission can submit its own role id together with an arbitrary list of menu ids.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106705","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-106705","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106705"}
{"incident_id":"SEA-CVE-2026-106931","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106931","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-106931","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-106931"}
{"incident_id":"SEA-CVE-2026-107120","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers to brute-force the PIN and create and activate a WordPress account bound to an email address they do not own, gaining an authenticated session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107120","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107120","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107120"}
{"incident_id":"SEA-CVE-2026-107126","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administration screen, allowing unauthenticated…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administration screen, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute in the session of an administrator who views the stored data.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107126","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107126","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107126"}
{"incident_id":"SEA-CVE-2026-107158","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107158","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107158","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107158"}
{"incident_id":"SEA-CVE-2026-107160","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107160","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107160","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107160"}
{"incident_id":"SEA-CVE-2026-107171","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107171","failure_patterns":"SEA-FM-010","capabilities":"auth.write_action;data.pii;data.untrusted_external_text;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107171","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107171"}
{"incident_id":"SEA-CVE-2026-107193","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A flaw has been found in permission filters in the foreman package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A flaw has been found in permission filters in the foreman package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged network attacker or user must already be allowed to delete filters for one role only. They can delete filters that belong to other unlocked roles. Those other roles then lose the access the deleted filters had granted.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107193","failure_patterns":"","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107193","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107193"}
{"incident_id":"SEA-CVE-2026-107288","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local webfetchtool and the WebFetch local fallback compare blockeddomains…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback compare blocked_domains entries with a URL hostname before both values are normalized to the form used by getaddrinfo. An attacker-influenced model can use an equivalent IDNA spelling, non-ASCII label separator, case variation, or trailing root label that resolves to a blocked host but does not match the configured string, causing the application to fetch that host with its own privileges. allowed_domains fails closed for unmatched spellings, and private-IP and cloud-metadata protections remain effective. This issue is fixed in versions 1.107.6 and 2.44.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107288","failure_patterns":"SEA-FM-010","capabilities":"auth.privileged_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107288","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107288"}
{"incident_id":"SEA-CVE-2026-107318","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the secure default and set rejectUnauthorized…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the secure default and set rejectUnauthorized to false, so the proxy does not verify the TLS certificate of the upstream even when the application points it at an https upstream in the default configuration. An on-path network attacker can therefore impersonate the configured HTTPS upstream, read the credentials and request bodies the proxy forwards, and return forged responses that the application trusts. The issue is fixed in @fastify/reply-from 12.7.0, and users should upgrade to 12.7.0 or later. As a workaround, pass an explicit rejectUnauthorized true on the transport, supply an already configured undici instance, or use the undici global agent.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107318","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"data.pii;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107318","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107318"}
{"incident_id":"SEA-CVE-2026-107322","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent context. To remediate this issue, users should upgrade to databases-on-aws plugin version 1.7.1 or later and verify that the updated plugin is active in each environment where it is used.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107322","failure_patterns":"SEA-FM-010","capabilities":"auth.infrastructure_modification;auth.write_action;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107322","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107322"}
{"incident_id":"SEA-CVE-2026-107324","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process, causing a denial of service. The driver's server-monitoring path contains panic recovery and is limited to server-selection failure.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107324","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107324","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107324"}
{"incident_id":"SEA-CVE-2026-107325","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an affected application may terminate an unprotected application process, causing a denial of service. No confidentiality or integrity impact has been identified.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107325","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107325","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107325"}
{"incident_id":"SEA-CVE-2026-107348","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Integer overflow in the message buffer growth logic (mbufmakeroom) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when maxpacketsize is configured above 2147483648.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_packet_size is configured above 2147483648. A packet header declaring a length above 2^31 makes the buffer size computation overflow, leaving the growth loop unable to terminate. Because PgBouncer serves all clients from a single process, this saturates a CPU core and stalls every pooled connection until the process is restarted. Since 1.23.0 the overflow is reachable before authentication with a five-byte packet header.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107348","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107348","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107348"}
{"incident_id":"SEA-CVE-2026-107349","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an empty parameter name, such as \"-c=\", makes the ignore_startup_parameters list lookup loop forever. Because PgBouncer serves all clients from a single process, this saturates a CPU core and makes PgBouncer unresponsive to all clients until the process is restarted.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107349","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107349","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107349"}
{"incident_id":"SEA-CVE-2026-107406","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC.","organization":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following versions: Applicable only when configured as a SAML IdP: NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive For the following versions: Applicable only when configured as a SAML SP or SAML IdP: NetScaler ADC and NetScaler Gateway before 14.1-73.37 NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS NetScaler ADC and NetScaler Gateway before 13.1-64.23 NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107406","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107406","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107406"}
{"incident_id":"SEA-CVE-2026-107421","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107421","failure_patterns":"","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107421","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107421"}
{"incident_id":"SEA-CVE-2026-107437","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Server V18.2.0A contains a plaintext database password embedded within an","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107437","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.credentials_secrets;arch.distributed_tx","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107437","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107437"}
{"incident_id":"SEA-CVE-2026-107445","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier. An authenticated user with permission to view flatpak remotes in one organization may be able to access flatpak remote repository information belonging to another organization. The same unscoped lookup is used by the mirror action, which may allow creating a repository in a product the user can edit that is configured with another organization's flatpak remote URL and stored remote credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107445","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107445","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107445"}
{"incident_id":"SEA-CVE-2026-107449","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps::execute(), a GuzzleHttp…","organization":"linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via SupportedApps::execute(), a GuzzleHttp client that lacks IP address restrictions. In some realistic installations, the POST /test_config (and GET /get_stats) endpoints are accessible through CSRF, and thus an unauthenticated attacker can force the server to send requests to arbitrary internal hosts and ports (including 169.254.169.254) and read a status/port oracle in addition to partial response data.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107449","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-107449","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107449"}
{"incident_id":"SEA-CVE-2026-107459","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107459","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107459","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107459"}
{"incident_id":"SEA-CVE-2026-107460","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the hostname's resolved IP addresses and then opens a separate connection that can resolve the hostname again. An attacker who controls DNS responses for the URL hostname may cause the connection to reach a restricted address after validation. CVE-2026-49328 covers SSRF in releases before 2.0.2-incubating; this issue is a DNS rebinding bypass of the protection in 2.0.2-incubating. Apache Fesod (Incubating) 2.1.0-incubating addresses the reported default-fetch scenario by disabling remote URL image fetching by default and requiring an explicit exact-host allowlist when the feature is enabled. Users should upgrade to 2.1.0-incubating. Applications enabling remote URL image fetching should allowlist only hostnames whose DNS and HTTP services are trusted.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107460","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-107460","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107460"}
{"incident_id":"SEA-CVE-2026-107503","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via injected OIDC authority in Ditto Explorer in Eclipse Ditto Ditto Explorer [3.6.0,3.9.7] allows a craft link set…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Unvalidated environments URL allows OAuth authorization code + PKCE verifier theft and account takeover via injected OIDC authority in Ditto Explorer in Eclipse Ditto Ditto Explorer [3.6.0,3.9.7] allows a craft link set an attacker-controlled OIDC authority with autoSso enabled. The UI then automatically starts a login at the genuine identity provider but exchanges the returned authorization code together with its PKCE code_verifier at an attacker-controlled token endpoint. This lets the attacker redeem the code for the victim's access and refresh tokens. Alternatively, an attacker-controlled api_uri causes the UI to send the victim's bearer token or Basic credentials to the attacker. Because the configuration is persisted, later visits to the UI without the crafted link repeat the token theft.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107503","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107503","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107503"}
{"incident_id":"SEA-CVE-2026-107594","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action that performs the deletion is reachable by unauthenticated users, allowing them to delete arbitrary files on the server, including files whose removal leads to full site compromise.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107594","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.untrusted_external_text;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107594","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107594"}
{"incident_id":"SEA-CVE-2026-107604","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator with only the read-only view-clients role can access the active primary secret of any confidential client, which should normally be restricted. This exposed secret can be used to impersonate the client and gain unauthorized access to its associated service account permissions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107604","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-107604","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107604"}
{"incident_id":"SEA-CVE-2026-107612","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global\\ namespace that carries the pipe HANDLE values is created with a NULL DACL, and its name is derived from a time-seeded srand(time(0)) value that is predictable to one-second granularity. A low-privileged local process can open the mapping and tamper with the IPC channel of a service running as SYSTEM, potentially leading to disclosure of session data, privilege escalation, or denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107612","failure_patterns":"SEA-FM-006","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107612","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107612"}
{"incident_id":"SEA-CVE-2026-107613","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties() (for example after a GPU reset, display hot-plug or session change), m_drvImpl is left NULL and is subsequently dereferenced without a check by executeDetection(), getScreenBuffer(), grabFb(), getScreenPropertiesChanged() and getCursorPosition().","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107613","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107613","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107613"}
{"incident_id":"SEA-CVE-2026-107615","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges.","organization":"An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init() (and ThemeLib) load screenhooks32.dll / screenhooks64.dll with LoadLibrary() using a bare file name and no LOAD_LIBRARY_SEARCH_ flags, so the TightVNC service follows the default DLL search order and loads an attacker-planted DLL from a writable directory earlier in that order (for example, an installation directory with permissive ACLs).","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107615","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107615","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107615"}
{"incident_id":"SEA-CVE-2026-107623","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the setting to be silently disabled. As a result, offline tokens may remain valid even after a user session is terminated via backchannel logout.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107623","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107623","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107623"}
{"incident_id":"SEA-CVE-2026-107636","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplying client-controlled plan and amount fields. Attackers can set item_number, cart_order_id, or the PayPal custom field while paying a token amount, or submit uncompleted PayPal IPN payments, to gain the most expensive membership and its paid features.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107636","failure_patterns":"","capabilities":"auth.financial_action;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107636","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107636"}
{"incident_id":"SEA-CVE-2026-107638","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication by guessing TOTP codes without limits.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication by guessing TOTP codes without limits. Attackers who know an account password can submit unlimited 6-digit verification codes to VerificationCodeFormProcess.php to take over member, affiliate, or administrator accounts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107638","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107638","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107638"}
{"incident_id":"SEA-CVE-2026-107639","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd() does not neutralise, to write a PHP file under the web root and achieve remote code execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107639","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107639","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107639"}
{"incident_id":"SEA-CVE-2026-107640","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty reset_key matches the defaulted empty value, to take over administrator accounts after enumerating valid usernames.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107640","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-107640","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107640"}
{"incident_id":"SEA-CVE-2026-107645","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implementuserregistration() AJAX handler explicitly disabling Dokan's…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_registration() AJAX handler explicitly disabling Dokan's vendor-registration nonce check (via add_filter('dokan_register_nonce_check', '__return_false')) and then trusting an attacker-supplied $_POST['role'] value when invoking wc_create_new_customer() and wc_set_customer_auth_cookie(). This makes it possible for unauthenticated attackers to elevate their privileges to a Dokan 'seller' (vendor) account — including sites where the Dokan vendor signup is explicitly turned off — and to be auto-authenticated into that account, which grants publishing capabilities beyond those of a normal customer.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107645","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-107645","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107645"}
{"incident_id":"SEA-CVE-2026-107646","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woofsettings[woofstat][serveroptions]'…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woof_settings[woof_stat][server_options]' parameter. This makes it possible for unauthenticated attackers to extract the external MySQL host, database name, username, and plaintext password stored in woof_settings[woof_stat][server_options] from the inline woof_tm_data script object on any public frontend filter page. This is only exploitable when an administrator has enabled the Statistics extension, saved external MySQL connection credentials, and enabled Turbo Mode — all supported, documented plugin configurations.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107646","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.write_action;auth.public_publication;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107646","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107646"}
{"incident_id":"SEA-CVE-2026-107651","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to arbitrary code execution or a Denial of Service (DoS) via application crash.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107651","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107651","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107651"}
{"incident_id":"SEA-CVE-2026-107674","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connections. A bad actor could use this to prevent a service from starting or cause it to fallback to non-secure connections.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107674","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107674","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107674"}
{"incident_id":"SEA-CVE-2026-107677","evidence_tier":"security_advisory","title":"ffmpeg issue could make the service unavailable","summary":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL.","organization":"ffmpeg project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media=\"\" so get_current_fragment() calls av_strireplace() with an empty search string, consuming CPU indefinitely.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107677","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107677","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107677"}
{"incident_id":"SEA-CVE-2026-107695","evidence_tier":"security_advisory","title":"ffmpeg issue could make the service unavailable","summary":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parseplaylist() accepts Master Playlist tags inside Media Playlists.","organization":"ffmpeg project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107695","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107695"}
{"incident_id":"SEA-CVE-2026-107698","evidence_tier":"security_advisory","title":"ffmpeg issue could reach internal services","summary":"FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ffrtspconnect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL.","organization":"ffmpeg project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes, bypassing -protocol_whitelist, to probe internal network services.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107698","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-107698","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107698"}
{"incident_id":"SEA-CVE-2026-107699","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path arguments. Attackers can append shell metacharacters such as ';' to file names passed to child_process.exec() in ppt2png.js, running commands with Node.js process privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107699","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107699","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107699"}
{"incident_id":"SEA-CVE-2026-107700","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get().","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load child_process and run operating system commands in the Node.js process.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107700","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107700","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107700"}
{"incident_id":"SEA-CVE-2026-107703","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convertTo arguments. Attackers can inject shell metacharacters or a single quote into the ImageMagick command run by child_process.exec() to execute operating system commands with Node.js process privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107703","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107703","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107703"}
{"incident_id":"SEA-CVE-2026-107704","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The imageoptimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentifyformat that allows attackers to execute commands by supplying a crafted image path when the identify…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizeridentify_format that allows attackers to execute commands by supplying a crafted image path when the identify option is enabled. Attackers controlling the path, such as an uploaded file name, can append shell metacharacters like ';' that are executed via Ruby backticks with the Ruby process privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107704","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107704","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107704"}
{"incident_id":"SEA-CVE-2026-107706","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to persistently modify extrafields on viewable third parties, products, members, projects or contacts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107706","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107706","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107706"}
{"incident_id":"SEA-CVE-2026-107712","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'currentmonth' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a regression vulnerability — a capability check introduced in versions 2.0.19.11–2.0.19.14 to address CVE-2024-50425 was removed in version 2.1, meaning any authenticated subscriber-level account can reach the vulnerable handler with no nonce validation required.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107712","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-107712","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107712"}
{"incident_id":"SEA-CVE-2026-107714","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agentresponseredirect treats redirects as same-origin when the host matches without consistently comparing scheme…","organization":"The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agentresponse_redirect treats redirects as same-origin when the host matches without consistently comparing scheme and port. A same-host HTTPS-to-HTTP redirect can send Authorization and Cookie headers over cleartext, while a same-host redirect to another port can send a caller-supplied Cookie header to a different service. Cookies in Mechanizecookie_jar remain scoped separately; the issue affects caller-supplied headers and can disclose credentials without affecting integrity or availability. This issue is fixed in version 2.14.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107714","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107714","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107714"}
{"incident_id":"SEA-CVE-2026-107726","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a malicious client able to connect to a cluster allows arbitrary reads from a cluster member's Java heap, off-heap data, and JVM process address space. The same flaw can crash cluster members and, in some Hazelcast Enterprise Edition configurations, corrupt memory with possible arbitrary code execution. Both slim and full distributions are affected. This issue is fixed in versions 5.4.5, 5.5.10, 5.6.1, and 5.7.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107726","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107726","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107726"}
{"incident_id":"SEA-CVE-2026-107733","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences WindowTab::filePath.","organization":"SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences WindowTab project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal to SumatraPDF's under Windows UIPI, can dispatch CmdExec over DDE or WM_COPYDATA while no document tab is open, causing abrupt process termination and loss of unsaved state. No broader impact is claimed beyond the advisory-supported conditions. No fixed version is available as of this review.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107733","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107733","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107733"}
{"incident_id":"SEA-CVE-2026-107761","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive. The public API's channel delete returns the deleted integration row, including the channel's platform access token and refresh token. A third-party OAuth app permitted to delete a channel therefore receives that channel's social platform credentials and can use them against the connected account directly, outside Postiz. GET /user/organizations returns each organization row, including its API key, to every member of the organization. The API key is intended for admins only, so a member with a lower role can obtain it and call the public API on behalf of the organization. Both endpoints require a valid session, API key or OAuth token and are scoped to the caller's own organization. There is no anonymous access and no cross-tenant exposure.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107761","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;auth.public_publication;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-107761","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107761"}
{"incident_id":"SEA-CVE-2026-107770","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is…","organization":"The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary media attachments via wpdeleteattachment and upload new attachments to the site, actions that require the uploadfiles or editothersposts capabilities. A Subscriber-level user can obtain their own wplrauthtoken directly from the profile.php page source, because the admin screen guard in MeowWPLRSyncAdmin project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary media attachments via wp_delete_attachment and upload new attachments to the site, actions that require the upload_files or edit_others_posts capabilities. A Subscriber-level user can obtain their own wplr_auth_token directly from the profile.php page source, because the admin screen guard in Meow_WPLR_Sync_Admin::__construct() is commented out, causing wp_localize_script to leak the token into every admin page view; this token can then be used from a cookie-less HTTP session to invoke destructive actions on the /?wplr-sync-api endpoint.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107770","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-107770","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107770"}
{"incident_id":"SEA-CVE-2026-107778","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in makecredlist() in rdcred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","failure_patterns":"SEA-FM-006","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107778","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107778"}
{"incident_id":"SEA-CVE-2026-107780","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote into format to break out of the PowerShell string and execute commands as the Skyeye service account on Windows.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107780","failure_patterns":"SEA-FM-002","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107780","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107780"}
{"incident_id":"SEA-CVE-2026-107781","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url and key parameters to make the server fetch internal URLs and overwrite any user's stored file, then read results via queryFileToShowById.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107781","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-107781","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107781"}
{"incident_id":"SEA-CVE-2026-107785","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg set command to update the live tunnel, and write the invalid key to the WireGuard configuration file. The update fails, so the live tunnel keeps using its previous preshared key until the tunnel is shut down. The tunnel will fail to start when restarted. For a peer which has never successfully negotiated a 32-byte bilocation key in a Crux C2 organization which has the \"Enforce SKA Use\" setting turned off, no preshared key will be set for the tunnel. Therefore, an attacker who is able to intercept and store the peer's traffic, and has access (or will have access) to a cryptographically relevant quantum computer, will be able to decrypt the tunnel.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107785","failure_patterns":"SEA-FM-010","capabilities":"auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107785","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107785"}
{"incident_id":"SEA-CVE-2026-107797","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters. Attackers can send crafted links to authenticated users, breaking out of unencoded inline JavaScript string literals to execute arbitrary JavaScript in the victim's session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107797","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107797","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107797"}
{"incident_id":"SEA-CVE-2026-107803","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because…","organization":"ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\\Traits\\TaskControllerIndexMethods project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the order_by parameter because ProcessMaker\\Traits\\TaskControllerIndexMethods::applyColumnOrdering() concatenates a user-controlled process_requests column name into a DB::raw() SQL subquery without validation or parameter binding. Any authenticated user can use blind, time-based queries to infer and extract data accessible to the ProcessMaker database account. This issue is fixed in version 2026.14.3.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107803","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-107803","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107803"}
{"incident_id":"SEA-CVE-2026-107806","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key, decrypts attacker-controlled contents, and replaces the live app.ini, including protected nginx command settings such as TestConfigCmd. Triggering POST /api/nginx/test then executes the restored command in the Nginx UI runtime context, affecting confidentiality, integrity, and availability. This issue is fixed in version 2.5.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107806","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107806","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107806"}
{"incident_id":"SEA-CVE-2026-107809","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stores the JWT in that cookie. Because management endpoints do not universally require a CSRF token or perform Origin or Referer validation, a remote attacker can induce a logged-in administrator's browser to submit authenticated cross-site state-changing requests, including POST /api/configs. The attack requires an administrator account without OTP/Passkey or a target endpoint that does not require secure-session proof. The attacker cannot read the cross-origin response but can modify Nginx configuration, trigger reloads, or invoke other management operations reachable with the victim's session. This issue is fixed in version 2.5.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107809","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107809","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107809"}
{"incident_id":"SEA-CVE-2026-107814","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege could write startup dot-files such as .bash_profile into $HOME, and those files could execute when an administrator opened a login shell for the mysql account. Debian packages are not affected because they use /nonexistent as the account home. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107814","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107814","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107814"}
{"incident_id":"SEA-CVE-2026-107815","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset. An authenticated user able to use the CONNECT engine could cause a crash and potentially remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107815","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107815","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107815"}
{"incident_id":"SEA-CVE-2026-107818","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv configuration permitting writes to /run/mysqld could create that file and inject attacker-controlled environment values into the restarted service. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107818","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107818","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107818"}
{"incident_id":"SEA-CVE-2026-107820","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcp_server.zig parses an unbounded Content-Length value in parseContentLength() and uses it in unchecked usize addition in wsRecv() before token authentication. The server listens on 0.0.0.0 by default in affected versions. An unauthenticated network client can supply a near-maximum Content-Length value to trigger a runtime integer-overflow panic in Debug and ReleaseSafe builds, terminating the entire x64dbg process and its live debugging session. The overflowed value is used only in a comparison, so the impact is limited to denial of service rather than memory corruption or code execution. This issue is fixed in version 1.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107820","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"auth.destructive_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107820","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107820"}
{"incident_id":"SEA-CVE-2026-107822","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched because both used an empty IP component. An attacker with CREATE USER could create the colliding principal and, when the original principal's database privileges were cached, exercise privileges assigned to the other account. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107822","failure_patterns":"","capabilities":"auth.write_action;data.pii;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107822","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107822"}
{"incident_id":"SEA-CVE-2026-107823","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could create a crafted username containing additional view metadata, causing the parser to interpret part of the username as security metadata and potentially escalating database privileges. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107823","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107823","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107823"}
{"incident_id":"SEA-CVE-2026-107824","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all MCP debugger tools over HTTP and SSE without authentication while listening on 0.0.0.0 by default. Any unauthenticated network client that can reach the default port, 9094 for x64 or 9095 for x32, can execute arbitrary x64dbg commands, attach to processes by PID, read and write debuggee memory, and write files to arbitrary paths. This issue is fixed in version 1.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107824","failure_patterns":"SEA-FM-010","capabilities":"auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107824","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107824"}
{"incident_id":"SEA-CVE-2026-107829","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107829","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-107829","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107829"}
{"incident_id":"SEA-CVE-2026-107830","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sending.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sending. Attackers can load newAccount.jsp to set session attributes, then repeatedly call the endpoint to harass arbitrary phone numbers and exhaust the operator's Tencent Cloud SMS balance.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107830","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107830","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107830"}
{"incident_id":"SEA-CVE-2026-107836","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nanocoap_sock_get_slice() in sys/net/application_layer/nanocoap/sock.c accepts a Block2 response when _block_cb() sees the expected block number without also verifying that the server-controlled szx and derived offset match the requested block geometry. A malicious CoAP server can return the expected block number with a larger block size, causing the derived offset to exceed the client slice offset and making ctx->offset - offset underflow in _2buf_slice(). The resulting buffer-relative calculation can read before the payload buffer and crash the client, causing denial of service and potentially exposing adjacent memory. No fixed release is available as of this review.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107836","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107836","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107836"}
{"incident_id":"SEA-CVE-2026-107838","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoap_fileserver callers in sys/net/application_layer/nanocoap/fileserver.c ignore a failure returned by _resp_init() when coap_build_reply() cannot fit a response header into the response buffer. A remote client can send a CoAP request with a sufficiently large extended token when nanocoap_token_ext is enabled, causing response initialization to fail while _get_file() or _get_directory() continues with stale response state. The path then reaches _calc_szx2() and its pdu->payload_len > reserve assertion, terminating the affected service or device task. No fixed release is available as of this review.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107838","failure_patterns":"","capabilities":"auth.destructive_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107838","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107838"}
{"incident_id":"SEA-CVE-2026-107840","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the method label for yopass_http_requests_total and yopass_http_request_duration_seconds. Because the catch-all route accepts arbitrary HTTP method tokens, an unauthenticated remote attacker can submit many unique methods and create metric series that the Prometheus registry never evicts. The resulting monotonic memory growth can OOM-kill the process, while the expanding registry also degrades /metrics scrape latency and can blind monitoring. This issue is fixed in version 14.7.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107840","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107840","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107840"}
{"incident_id":"SEA-CVE-2026-107851","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Security/Voter/DataContainer/TableAccessVoter.php caches authorization decisions using only…","organization":"Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Security/Voter/DataContainer/TableAccessVoter.php caches authorization decisions using only $tokenHash, a hash of the user's security token, and omits the table returned by getDataSource(). If one request first checks a table allowed to the user and then a different denied table, the voter can reuse the allowed result, while DefaultDataContainerVoter can convert an incorrect abstention into a grant. A low-privileged backend user can consequently read, create, update, or delete records in tables outside assigned module permissions, including tables containing member or newsletter-subscriber data. This issue is fixed in version 5.7.12.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107851","failure_patterns":"","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107851","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107851"}
{"incident_id":"SEA-CVE-2026-107852","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when paymentstatus is paid but…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout Session when payment_status is paid but does not compare amount_total or currency with the referenced order and configured billing currency. On an instance where the billing module is enabled and a Stripe secret key is configured, an authenticated client can therefore complete a lower-value or mismatched-currency payment and cause the order to be processed, provisioning, renewing, upgrading, or unsuspending the purchased server for less than the required price. This issue is fixed in version 4.0.5.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107852","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107852","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107852"}
{"incident_id":"SEA-CVE-2026-107854","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled serverid and loads the server without…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled server_id and loads the server without restricting the lookup to servers owned by the authenticated account. On installations with billing enabled, an authenticated user can renew or unsuspend another tenant's billable server when its renewal_date is non-null and more than seven days away, even without a subuser relationship to that server. This issue is fixed in version 4.0.5.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107854","failure_patterns":"","capabilities":"auth.financial_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107854","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107854"}
{"incident_id":"SEA-CVE-2026-107857","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtr_cloud_token and @mindwtr_webdav_password. A party with access to the application database or an exposed device backup can recover these credentials and use them to access the user's synchronized tasks and attachments. This issue is fixed in version 1.1.5.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107857","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.pii;data.credentials_secrets;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107857","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107857"}
{"incident_id":"SEA-CVE-2026-107885","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs().","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107885","failure_patterns":"","capabilities":"arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107885","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107885"}
{"incident_id":"SEA-CVE-2026-107889","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields. This could result in unauthorized JavaScript execution in the browsers of users visiting the login page, potentially leading to data exposure or session interference.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107889","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107889","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107889"}
{"incident_id":"SEA-CVE-2026-107890","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPP_TAG_ZERO, but add_job() converts these separators to IPP_TAG_JOB. During job startup, get_options()/ipp_length() subsequently calls strlen() on a NULL attribute name, terminating cupsd and disrupting all queues. A single crafted Print-Job request can trigger the crash when the client can reach the scheduler and submit jobs to an accepting, enabled queue supporting the submitted document format. Anonymous submission is possible when permitted by listener and access-control configuration.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107890","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-107890","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107890"}
{"incident_id":"SEA-CVE-2026-107908","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/boltapi.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly execute arbitrary code by sending a Bolt RESET message with an attacker-chosen chunk size to the Bolt port. The handler checks the size only with ASSERT(), which is compiled out in release builds, then computes a destination pointer from the wire-supplied 16-bit size and moves buffered data up to about 64 KiB backwards past the start of the read buffer. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107908","failure_patterns":"SEA-FM-002","capabilities":"auth.financial_action;auth.write_action;data.financial_records","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107908","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107908"}
{"incident_id":"SEA-CVE-2026-107909","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A heap-based out-of-bounds write in the wsreadframe function (src/bolt/ws.c) and the bufferapplymask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of service and possibly corrupt heap memory by sending a WebSocket frame with a 64-bit extended payload length to the Bolt port. The payload length is not bounded, and the only bounds check in buffer_apply_mask is an ASSERT(), which is compiled out in release builds, so the function XORs memory beyond the end of the receive buffer with the attacker-supplied mask key. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107909","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107909","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107909"}
{"incident_id":"SEA-CVE-2026-107910","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"An improper authentication vulnerability in the isauthenticated function (src/bolt/boltapi.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph queries without credentials through the Bolt endpoint. The function decides whether a password is required by issuing an empty AUTH command to Redis and treats only a WRONGPASS error as meaning that a password is required; any other error, such as LOADING while a dataset is being loaded, MASTERDOWN during replication failover, or OOM under memory pressure, causes the client to be treated as authenticated. Only deployments that enable the Bolt endpoint (BOLT_PORT, disabled by default) are affected.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107910","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.credentials_secrets;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107910","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107910"}
{"incident_id":"SEA-CVE-2026-107911","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A type confusion vulnerability in the readflags function (src/commands/cmddispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any client and casts the following command argument, a Redis string object, to a Bolt client structure without checking its origin; the result-set code then dereferences pointers read from that object. The argument is parsed even when the Bolt endpoint is disabled, so default configurations are affected.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107911","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107911","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107911"}
{"incident_id":"SEA-CVE-2026-107935","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107935","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-107935","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-107935"}
{"incident_id":"SEA-CVE-2026-108063","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash, resulting in a Denial of Service (DoS).","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108063","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-108063","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108063"}
{"incident_id":"SEA-CVE-2026-108065","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote attacker to read, write, and potentially execute commands on the backend Microsoft SQL Server via a crafted sUserID parameter value containing a single quote and stacked SQL query.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108065","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108065","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108065"}
{"incident_id":"SEA-CVE-2026-108066","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site administrator on WordPress Multisite to remove…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site administrator on WordPress Multisite to remove the 2FA configuration of users outside their own site, including accounts they are not permitted to edit. On single-site installs an administrator can already manage all users, so this crosses a trust boundary only on Multisite.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108066","failure_patterns":"","capabilities":"auth.destructive_action;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108066","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108066"}
{"incident_id":"SEA-CVE-2026-108070","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108070","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108070","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108070"}
{"incident_id":"SEA-CVE-2026-108072","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server could modify these files to execute arbitrary commands within another user’s security context when that user logs in using the same theme or operating mode. Depending on the affected user’s privileges, exploitation could allow lateral movement between users or privilege escalation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108072","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-108072","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108072"}
{"incident_id":"SEA-CVE-2026-108092","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due to the b2s_ship_item and b2s_ship_item_reload_url AJAX handlers lacking per-object authorization on the postId parameter. This makes it possible for authenticated attackers with Contributor-level access and above to read the title and content of any post, including private and pending posts belonging to other users.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108092","failure_patterns":"","capabilities":"auth.public_publication;data.pii;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108092","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108092"}
{"incident_id":"SEA-CVE-2026-108096","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of…","organization":"Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has been addressed in @aws-amplify/graphql-index-transformer 3.1.2 https project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has been addressed in @aws-amplify/graphql-index-transformer 3.1.2 https://www.npmjs.com/package/@aws-amplify/graphql-index-transformer/v/3.1.2 (included in @aws-amplify/data-construct 1.17.4 https://www.npmjs.com/package/@aws-amplify/data-construct/v/1.17.4 and @aws-amplify/graphql-api-construct 1.21.4 https://www.npmjs.com/package/@aws-amplify/graphql-api-construct/v/1.21.4 ). We recommend upgrading to the latest version ensuring any forked or derivative code is patched to incorporate the new fixes and then redeploying their backend.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108096","failure_patterns":"SEA-FM-003","capabilities":"auth.infrastructure_modification;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108096","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108096"}
{"incident_id":"SEA-CVE-2026-108100","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint.","organization":"HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to the /api/locations/list endpoint. Attackers can place subqueries in include_info, which PlantsModel::getSpecificInfo() concatenates into the column list, to read any database table including user password hashes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108100","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108100","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108100"}
{"incident_id":"SEA-CVE-2026-108106","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or SnappyFramedInputStream to force allocations up to 2 GB, causing OutOfMemoryError and denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108106","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-108106","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108106"}
{"incident_id":"SEA-CVE-2026-108107","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to extract customer records and credentials via time-based blind SQL injection.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108107","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108107","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108107"}
{"incident_id":"SEA-CVE-2026-108109","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otpcode.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers to brute-force the 6-digit otp_code. Attackers knowing a customer username can guess the code without attempt limits or lockout, then read the newly set password from the HTTP response to hijack the account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108109","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108109","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108109"}
{"incident_id":"SEA-CVE-2026-108110","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or /api/documents/save-blueprint to read private documents and overwrite presentation blueprints.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108110","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108110","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108110"}
{"incident_id":"SEA-CVE-2026-108111","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or is_public filtering, to list enabled private workflows in the same tenant, including UUIDs and full node and edge configurations.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108111","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108111","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108111"}
{"incident_id":"SEA-CVE-2026-108114","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields, token holders can keep reading content fields an administrator removed from the role.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108114","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108114","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108114"}
{"incident_id":"SEA-CVE-2026-108115","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers holding project.connector.write can set connector base_url, OpenAPI, Postman, or MCP URLs to reach internal services and cloud metadata endpoints and read responses.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108115","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108115","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108115"}
{"incident_id":"SEA-CVE-2026-108124","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108124","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108124","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108124"}
{"incident_id":"SEA-CVE-2026-108125","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108125","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108125","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108125"}
{"incident_id":"SEA-CVE-2026-108151","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108151","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108151","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108151"}
{"incident_id":"SEA-CVE-2026-108157","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp(). Attackers can register a victim's unverified email on an enabled OAuth/OIDC provider, exploiting the missing email_verified check in GenericOidcProvider, to sign in as the victim including administrators while bypassing TOTP.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108157","failure_patterns":"","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108157","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108157"}
{"incident_id":"SEA-CVE-2026-108158","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then fetch them unauthenticated through /download/uploadedFile/.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108158","failure_patterns":"SEA-FM-002","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-108158","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108158"}
{"incident_id":"SEA-CVE-2026-108159","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emits HTML event handlers invoking the unrestricted open-path IPC handler with shell metacharacters, executing commands as the desktop user.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108159","failure_patterns":"","capabilities":"data.pii;arch.event_driven;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108159","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108159"}
{"incident_id":"SEA-CVE-2026-108161","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values.","organization":"FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the record_name filename template is enabled, attackers can embed shell metacharacters like $(...) in the Caller-ID name or number, executing commands as the web server user once a privileged user downloads multiple recordings as a ZIP.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108161","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-108161","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108161"}
{"incident_id":"SEA-CVE-2026-108162","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For values against /api/auth/signIn, /api/auth/signIn/totp, and /api/auth/resetPassword to brute-force passwords and TOTP codes and forge logged client IP addresses.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108162","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108162","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108162"}
{"incident_id":"SEA-CVE-2026-108163","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and /api/auth/resetPassword to brute-force passwords and TOTP codes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108163","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108163","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108163"}
{"incident_id":"SEA-CVE-2026-108259","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCELGITCOMMITREF, GITHUBBRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCEL_GIT_COMMIT_REF, GITHUB_BRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in packages/@tinacms/cli/src/next/codegen/index.ts and packages/@tinacms/cli/src/next/codegen/codegen/plugin.ts. A crafted Git-valid branch name containing a quote can terminate the generated string and inject an expression that executes when the generated client module is imported during a preview build. The injected code runs with the build process privileges and can read environment credentials, modify deployment artifacts, or make network requests. This issue is fixed in version 3.0.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108259","failure_patterns":"SEA-FM-012","capabilities":"auth.destructive_action;auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108259","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108259"}
{"incident_id":"SEA-CVE-2026-108263","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /workflow/v1/run selects LocalExecutor in core/workflow/engine/nodes/code/code_node.py when CODE_EXEC_TYPE is not explicitly changed. LocalExecutor supplies complete Python builtins to dynamic code execution without the documented sandbox restrictions. An authenticated low-privilege tenant can execute code as root in the core-workflow container and use shared service and database credentials to bypass application-level tenant checks, read or modify other tenants' data, and disrupt shared services. This issue is fixed in version 1.1.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108263","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"auth.code_execution;auth.privileged_action;auth.infrastructure_modification;auth.write_action;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-108263","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108263"}
{"incident_id":"SEA-CVE-2026-108264","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app/blueprints/wizard/routes.py in the application's non-sandboxed Jinja2 environment with application globals exposed. An authenticated user able to create steps, or an administrator importing an untrusted bundle through POST /settings/wizard/import, could execute arbitrary Python when GET /wizard/{server}/{idx} rendered the stored step; app/jinja_filters.py and app/services/wizard_widgets.py contained additional evaluation sinks. This could execute operating-system commands as the application user, disclose the Flask SECRET_KEY, access connected service credentials and the database, and produce stored cross-site scripting. This issue is fixed in 2026.9.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108264","failure_patterns":"SEA-FM-012","capabilities":"auth.code_execution;auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108264","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108264"}
{"incident_id":"SEA-CVE-2026-108265","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in wasm-v0.40.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108265","failure_patterns":"","capabilities":"auth.destructive_action;auth.public_publication;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108265","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108265"}
{"incident_id":"SEA-CVE-2026-108266","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in privasys-v0.8.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108266","failure_patterns":"","capabilities":"auth.destructive_action;auth.public_publication;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108266","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108266"}
{"incident_id":"SEA-CVE-2026-108267","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept a handshake terminated by the attacker as an attested enclave connection. This issue is fixed in privasys-v0.5.1-go1.26.5.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108267","failure_patterns":"","capabilities":"auth.financial_action;auth.destructive_action;auth.public_publication;data.financial_records;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108267","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108267"}
{"incident_id":"SEA-CVE-2026-108268","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in tdx-v0.2.43 and tdx-gpu-v0.6.27.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108268","failure_patterns":"","capabilities":"auth.destructive_action;auth.infrastructure_modification;auth.public_publication;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108268","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108268"}
{"incident_id":"SEA-CVE-2026-108269","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before permitting application traffic. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing the clients to accept an attacker-terminated connection as the attested enclave. This issue is fixed in 0.5.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108269","failure_patterns":"","capabilities":"auth.destructive_action;auth.public_publication;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108269","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108269"}
{"incident_id":"SEA-CVE-2026-108335","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack. There is no rate limiting on the attempts to enter the reset code, leading to the possibility of a brute force solution to the password reset challenge. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108335","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108335","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108335"}
{"incident_id":"SEA-CVE-2026-108336","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"When the default self-signed certificate is used, an attacker could gain administrative access to the application.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT access tokens that are used to validate that the user is logged in. When the default SSL certificate is used, an attacker could have the capability to sign JWT access tokens and bypass login. An attacker could gain administrative access to the application and perform actions like configuring the service or requesting log collection. Device credentials and customer data cannot be accessed with this vulnerability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108336","failure_patterns":"SEA-FM-012","capabilities":"auth.infrastructure_modification;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108336","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108336"}
{"incident_id":"SEA-CVE-2026-108337","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"An administrator could retrieve the password reset code for any user and take over the account.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"An administrator could retrieve the password reset code for any user and take over the account. The password reset codes were included in the output of an API and could be used to reset the password of any account. The API is limited to use by administrator accounts only. An attacker who already has administrative access to the application could compromise the credentials of other accounts on the application. Device credentials and customer data cannot be accessed with this vulnerability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108337","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108337","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108337"}
{"incident_id":"SEA-CVE-2026-108474","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108474","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108474","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108474"}
{"incident_id":"SEA-CVE-2026-108504","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108504","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108504","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108504"}
{"incident_id":"SEA-CVE-2026-108521","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint.","organization":"A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor confirms project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor confirms: \"The node API URL could be configured by an authenticated user with node-management permission and used to initiate server-side requests. [T]he report demonstrates server-side request capability but not arbitrary internal response exfiltration.\"","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108521","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.public_publication;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108521","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108521"}
{"incident_id":"SEA-CVE-2026-108522","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint.","organization":"A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The patch is named 79b86ddcd4aefdd6941f098e35990ab397b13c72. To fix this issue, it is recommended to deploy a patch. The vendor confirms project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation of the argument X-Forwarded-For results in improper authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The patch is named 79b86ddcd4aefdd6941f098e35990ab397b13c72. To fix this issue, it is recommended to deploy a patch. The vendor confirms: \"The login limiter relied on client-supplied X-Forwarded-For data without an explicit trusted-proxy boundary, allowing an attacker to rotate the apparent client address. The remediation now ignores forwarding headers by default, accepts them only from explicitly configured proxy CIDRs, and adds a separate failed-attempt limit keyed by normalized account identity.\"","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108522","failure_patterns":"","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108522","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108522"}
{"incident_id":"SEA-CVE-2026-108523","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint.","organization":"A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repourl can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The presence of this vulnerability remains uncertain at this time. This patch is called 79b86ddcd4aefdd6941f098e35990ab397b13c72. It is advisable to implement a patch to correct this issue. The vendor explains project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API Endpoint. Executing a manipulation of the argument repo_url can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The presence of this vulnerability remains uncertain at this time. This patch is called 79b86ddcd4aefdd6941f098e35990ab397b13c72. It is advisable to implement a patch to correct this issue. The vendor explains: \"Git repository access is an intentional, privileged administrative function. Sencho explicitly supports repositories hosted on private LAN, VPC, VPN, CGNAT, and IPv6 ULA networks. The report does not demonstrate a privilege-boundary bypass or access by an unprivileged user. We therefore dispute the CVE characterization of this behavior. As defense in depth, we have nevertheless hardened repository access. Git HTTPS and SSH connections now validate and pin DNS resolution, reject loopback, link-local, multicast, selected special-use and metadata targets, disable redirects and inherited proxy routing, and retain strict SSH host-key verification.\"","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108523","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108523","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108523"}
{"incident_id":"SEA-CVE-2026-108541","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the argument lat/lng leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Upgrading to version 3.9 is able to address this issue. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108541","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;auth.public_publication;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108541","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108541"}
{"incident_id":"SEA-CVE-2026-108542","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108542","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"auth.public_publication;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108542","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108542"}
{"incident_id":"SEA-CVE-2026-108545","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 500 MB, optionally in parallel, to exhaust memory and CPU and deny service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108545","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-108545","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108545"}
{"incident_id":"SEA-CVE-2026-108546","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are substituted unescaped for $SPOTTITLE and passed to exec() when a user downloads the spot, running commands as the Spotweb PHP process.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108546","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-108546","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108546"}
{"incident_id":"SEA-CVE-2026-108547","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint. Attackers can enumerate sequential shared variable IDs and decrypt all-users variables re-encrypted with their own tenant key to recover other tenants' credentials in plaintext.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108547","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108547","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108547"}
{"incident_id":"SEA-CVE-2026-108548","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's authhandler.lua that accepts any Bearer token without validation.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that accepts any Bearer token without validation. Unauthenticated attackers can send arbitrary Bearer values to reach /api/resource/ and /api/rpa-ai-service/ routes and spoof X-User-Id or user_id headers to act as any user.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108548","failure_patterns":"SEA-FM-003","capabilities":"data.pii;data.credentials_secrets","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108548","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108548"}
{"incident_id":"SEA-CVE-2026-108549","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhooksecret is configured.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when no webhook_secret is configured. Remote attackers reaching the webhook listener on port 8080 can forge updates with an allowed or admin user_id to run privileged commands like /shell on the host.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108549","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.write_action;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108549","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108549"}
{"incident_id":"SEA-CVE-2026-108550","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other accounts by abusing the merge flow.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other accounts by abusing the merge flow. Attackers can call the merge initiate endpoint with a target username or OAuth identity, receive the verification token directly, and confirm the merge to inherit the victim's API tokens, roles and namespace ownership.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108550","failure_patterns":"","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108550","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108550"}
{"incident_id":"SEA-CVE-2026-108551","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter names, servers[0].url, or info.version to execute arbitrary JavaScript when generated clients are imported or service methods called.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108551","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108551","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108551"}
{"incident_id":"SEA-CVE-2026-108554","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input. The translate_file handler passes user URLs to download_with_limit without scheme or address validation, letting attackers reach internal services and cloud metadata endpoints and retrieve returned PDFs.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108554","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108554","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108554"}
{"incident_id":"SEA-CVE-2026-108581","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which only validate the JWT, to obtain plaintext LLM and voice provider API keys and abuse the upstream provider accounts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108581","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108581","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108581"}
{"incident_id":"SEA-CVE-2026-108582","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to read client uploads and converted outputs, bypassing the HTTP bearer token.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108582","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"auth.write_action;data.pii;data.credentials_secrets;data.uploaded_files;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108582","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108582"}
{"incident_id":"SEA-CVE-2026-108583","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108583","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108583","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108583"}
{"incident_id":"SEA-CVE-2026-108585","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositories/ to send authenticated DELETE requests deleting repositories, clusters, or projects within the token's RBAC permissions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108585","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"auth.destructive_action;auth.infrastructure_modification;auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-108585","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108585"}
{"incident_id":"SEA-CVE-2026-108586","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can send a filter like not <granted-tag> to list and invoke tools on backend MCP servers outside their granted scopes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108586","failure_patterns":"SEA-FM-010","capabilities":"auth.privileged_action;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108586","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108586"}
{"incident_id":"SEA-CVE-2026-108587","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34.10 via the compressCustom function. This is due to missing file type validation and extension filtering on the page_id parameter, combined with a world-readable leaked nonce that bypasses authentication checks. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. This exploit chain requires obtaining the plugin's REST nonce (tenwebio_rest), which is automatically serialized to a world-readable file under wp-content/uploads/ whenever a bulk optimisation batch pauses; because the nonce is generated in a cron/loopback context with a user ID of 0, it is valid for unauthenticated visitors.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108587","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.uploaded_files;arch.caching;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-108587","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108587"}
{"incident_id":"SEA-CVE-2026-108591","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with filescreate permission to read server files by abusing the AI Core MCP fileupload tool's source argument.","organization":"InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with filescreate permission to read server files by abusing the AI Core MCP fileupload tool's source argument. Attackers can supply file project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to file_get_contents(), storing contents on the public media disk to expose the .env file with APP_KEY and database credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108591","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"auth.privileged_action;auth.write_action;auth.public_publication;data.credentials_secrets;arch.async_job;arch.event_driven;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108591","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108591"}
{"incident_id":"SEA-CVE-2026-108592","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make the agent read API keys from the environment and exfiltrate them over the shared network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108592","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"auth.code_execution;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108592","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108592"}
{"incident_id":"SEA-CVE-2026-108593","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a baseUrl containing double quotes and newlines to add hooks_auto_accept and a hooks.post_llm_call shell command, which Hermes Agent executes without approval after an LLM call.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108593","failure_patterns":"SEA-FM-010","capabilities":"auth.code_execution;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108593","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108593"}
{"incident_id":"SEA-CVE-2026-108594","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider hostname. Authenticated OIDC users who control their picture URL can make the server send GET requests to arbitrary ports on the provider's internal address on each login.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108594","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108594","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108594"}
{"incident_id":"SEA-CVE-2026-108595","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspaceonlywrites and readonly mode by supplying an unchecked workdir to agentspawn.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspace_only_writes and readonly mode by supplying an unchecked workdir to agent_spawn. Attackers can plant prompt-injected instructions in processed content so the agent spawns a worker rooted elsewhere, causing unapproved file writes anywhere the user can write.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108595","failure_patterns":"SEA-FM-010","capabilities":"auth.privileged_action;auth.write_action;data.pii;arch.async_job;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108595","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108595"}
{"incident_id":"SEA-CVE-2026-108596","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header. Attackers who know a victim project id and database config id can query the trace read API to obtain traces including LLM prompts and completions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108596","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.pii;data.untrusted_external_text;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108596","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108596"}
{"incident_id":"SEA-CVE-2026-108597","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in s3modelsdirtotarfile that allows arbitrary file write via unvalidated tarfile.extractall calls.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to overwrite files on the SDK host.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108597","failure_patterns":"SEA-FM-002","capabilities":"auth.infrastructure_modification;auth.write_action;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-108597","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108597"}
{"incident_id":"SEA-CVE-2026-108598","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping templates. Attackers can create a REST API with a MOCK integration whose template uses $util reflection to reach Runtime or ProcessBuilder, executing OS commands in the Floci JVM.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108598","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108598","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108598"}
{"incident_id":"SEA-CVE-2026-108600","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the filewrite tool sandbox that allows attackers to create files outside the workspace root by using dangling…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the file_write tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling symlink in the workspace and steer the agent via prompt injection to write attacker-influenced content anywhere the agent process can write.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108600","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"auth.code_execution;auth.privileged_action;auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108600","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108600"}
{"incident_id":"SEA-CVE-2026-108602","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses. Attackers can create webhooks with public hostnames that resolve or DNS-rebind to loopback or internal addresses, causing blind POST requests to internal HTTPS services.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108602","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication;data.pii;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108602","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108602"}
{"incident_id":"SEA-CVE-2026-108604","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP runquery safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run statements like SELECT setval, nextval, or PostgreSQL query_to_xml with embedded DELETE to modify data without approval prompts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108604","failure_patterns":"SEA-FM-010","capabilities":"auth.destructive_action;auth.write_action;data.untrusted_external_text;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108604","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108604"}
{"incident_id":"SEA-CVE-2026-108605","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates.","organization":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. Low-privileged attackers can send PUT requests to /airag/ocr/edit to overwrite LLM prompts in the shared airag project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. Low-privileged attackers can send PUT requests to /airag/ocr/edit to overwrite LLM prompts in the shared airag:ocr Redis key, corrupting OCR results for all users.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108605","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.untrusted_external_text;arch.caching;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108605","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108605"}
{"incident_id":"SEA-CVE-2026-108606","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records. Low-privileged attackers can obtain record ids from the unguarded GET /airag/ocr/list endpoint and repeatedly delete every shared OCR prompt record stored in Redis.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108606","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108606","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108606"}
{"incident_id":"SEA-CVE-2026-108611","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. Low-privileged attackers can send DELETE requests to /airag/word/delete with an id parameter to permanently remove any template from the shared library.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108611","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108611","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108611"}
{"incident_id":"SEA-CVE-2026-108612","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates. Attackers can send a DELETE request to /airag/word/deleteBatch with comma-separated ids to permanently delete any templates in the shared library.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108612","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108612","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108612"}
{"incident_id":"SEA-CVE-2026-108615","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI evaluator records.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI evaluator records. Attackers can send DELETE requests to /airag/extData/delete with any id parameter to remove other users' AI evaluator or test-tracking records without owner or tenant checks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108615","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108615","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108615"}
{"incident_id":"SEA-CVE-2026-108616","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records. Low-privileged attackers can send comma-separated ids to DELETE /airag/extData/deleteBatch, which lacks owner or tenant checks, deleting other users' evaluator and test-tracking records.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108616","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108616","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108616"}
{"incident_id":"SEA-CVE-2026-108617","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add. Attackers holding only minimal roles can insert arbitrary notification templates with chosen codes and content into the shared sys_sms_template library used for system, e-mail, SMS and IM notifications.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108617","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108617","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108617"}
{"incident_id":"SEA-CVE-2026-108637","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/deleteUserGroupBatch.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/deleteUserGroupBatch. Attackers can supply any groupId and comma-separated userIds to delete sys_ugroup_user rows without permission or tenant checks, tampering with administrator-maintained groups.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108637","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108637","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108637"}
{"incident_id":"SEA-CVE-2026-108638","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in SysUserController.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in SysUserController. Attackers can send DELETE requests with arbitrary groupId and userId values to remove any user from any administrator-maintained user group without ownership or tenant checks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108638","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108638","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108638"}
{"incident_id":"SEA-CVE-2026-108648","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or role annotations.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or role annotations. Any authenticated low-privileged user can supply datasource codes in the dbSourceCode parameter to retrieve JDBC URLs, usernames and decrypted cleartext database passwords.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108648","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108648","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108648"}
{"incident_id":"SEA-CVE-2026-108649","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiController that lets authenticated users read any user's role codes.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiController that lets authenticated users read any user's role codes. Low-privileged attackers can send a userId to GET /sys/api/queryUserRolesById to enumerate role assignments and identify administrator accounts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108649","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108649","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108649"}
{"incident_id":"SEA-CVE-2026-108650","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to read other users' permission codes.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to read other users' permission codes. Low-privileged attackers can supply an arbitrary userId to GET /sys/api/getUserPermissionSet to retrieve the full permission set of any account, including administrators.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108650","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108650","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108650"}
{"incident_id":"SEA-CVE-2026-108651","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiController that allows authenticated users to retrieve any user's role codes.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiController that allows authenticated users to retrieve any user's role codes. Low-privileged attackers can supply arbitrary userId values to GET /sys/api/getRolesByUserId to enumerate role assignments and identify administrator accounts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108651","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108651","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108651"}
{"incident_id":"SEA-CVE-2026-108656","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTenantPackApplyUsers endpoint that allows any authenticated user to read tenant administrator…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTenantPackApplyUsers endpoint that allows any authenticated user to read tenant administrator applications. Low-privileged attackers can iterate the tenantId parameter to retrieve pending applicants' usernames, real names, phone numbers and departments for any tenant.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108656","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108656","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108656"}
{"incident_id":"SEA-CVE-2026-108657","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrator applications. Attackers can file a pending application via doApplyTenantPackUser and approve it through PUT /sys/tenant/passApply to gain tenant administrator pack permissions in any tenant.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108657","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108657","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108657"}
{"incident_id":"SEA-CVE-2026-108658","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo handler that allows any authenticated user to read other tenants' records.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo handler that allows any authenticated user to read other tenants' records. Low-privileged attackers can iterate small integer tenant ids to retrieve full sys_tenant records, including house numbers used as tenant join codes and company profile fields.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108658","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108658","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108658"}
{"incident_id":"SEA-CVE-2026-108659","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId handler that allows any authenticated user to query tenant product packs.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId handler that allows any authenticated user to query tenant product packs. Low-privileged attackers can supply arbitrary tenantId and userId parameters to enumerate any tenant's product pack configuration and reveal which users are tenant administrators.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108659","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108659","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108659"}
{"incident_id":"SEA-CVE-2026-108660","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT /sys/tenant/updateApplyStatus.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT /sys/tenant/updateApplyStatus. Low-privileged attackers can supply any tenant id to overwrite its applyStatus field, enabling or disabling tenant administrator applications across tenants.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108660","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.cross_tenant_data","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108660","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108660"}
{"incident_id":"SEA-CVE-2026-108661","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer tenant ownership via POST /sys/tenant/changeOwenUserTenant.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer tenant ownership via POST /sys/tenant/changeOwenUserTenant. Low-privileged attackers can supply userId and tenantId parameters to reassign any tenant's owner to a member, including themselves, and strip the legitimate owner.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108661","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108661","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108661"}
{"incident_id":"SEA-CVE-2026-108662","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/deleteTenantPackUser.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/deleteTenantPackUser. Attackers can supply arbitrary userId and packId values in the request body to remove any user from any tenant's product pack, revoking permissions such as tenant administrator access.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108662","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108662","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108662"}
{"incident_id":"SEA-CVE-2026-108663","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated user to reject tenant administrator applications.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated user to reject tenant administrator applications. Low-privileged attackers can send PUT requests with chosen tenantId, packId and userId values to delete pending applications in any tenant and notify applicants of rejection.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108663","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108663","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108663"}
{"incident_id":"SEA-CVE-2026-108671","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out. Attackers can obtain record ids from the unguarded /airag/app/queryById endpoint and retrieve MCP endpoint URLs, headers, and outbound authentication tokens.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108671","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"auth.privileged_action;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108671","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108671"}
{"incident_id":"SEA-CVE-2026-108677","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC protected response using the hard-coded key exposed by /sys/getEncryptedString to obtain administrators' password ciphertexts for offline guessing.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108677","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108677","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108677"}
{"incident_id":"SEA-CVE-2026-108678","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes. Low-privileged attackers can send GET requests to /sys/api/queryUserRoles with an arbitrary username to enumerate role assignments and identify administrator accounts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108678","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108678","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108678"}
{"incident_id":"SEA-CVE-2026-108679","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announcements without the required permissions.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announcements without the required permissions. Low-privileged attackers can POST crafted bodies to /sys/api/sendBusAnnouncement with forged sender, recipients, title and content to deliver spoofed admin or system messages for phishing.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108679","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108679","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108679"}
{"incident_id":"SEA-CVE-2026-108680","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement. Low-privileged attackers can supply forged sender, recipients, title, and template parameters to deliver messages appearing to come from admin or system accounts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108680","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108680","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108680"}
{"incident_id":"SEA-CVE-2026-108688","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission.","organization":"Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission. Attackers can send POST requests with image-named files to /api/localStorage/pictures to write files into server local storage and disclose absolute server paths.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108688","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108688","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108688"}
{"incident_id":"SEA-CVE-2026-108691","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to /p/shopCart/cleanExpiryProdList to remove every user's cart entries for off-shelf products, which do not return when products are restocked.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108691","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108691","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108691"}
{"incident_id":"SEA-CVE-2026-108692","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking permission checks.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking permission checks. Authenticated users denied module permission can page through organization-wide leads, contacts, quotations, contracts, payment plans, payment records, orders and invoices owned by other users.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108692","failure_patterns":"SEA-FM-003","capabilities":"auth.financial_action;auth.privileged_action;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108692","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108692"}
{"incident_id":"SEA-CVE-2026-108694","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108694","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-108694","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108694"}
{"incident_id":"SEA-CVE-2026-108695","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint. Attackers with the store_owner role can send POST requests to /wp-json/multivendorx/v1/settings, gated only by edit_stores, to overwrite commission, payout, and onboarding settings.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108695","failure_patterns":"","capabilities":"auth.financial_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108695","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108695"}
{"incident_id":"SEA-CVE-2026-108702","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"1Panel-dev CordysCRM through 1.9.3 lacks a PROCESSSETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side requests to attacker-supplied URLs.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side requests to attacker-supplied URLs. Attackers can redirect GET requests from a controlled host to bypass SSRFValidator and probe internal addresses through success or failure results.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108702","failure_patterns":"","capabilities":"auth.privileged_action;data.pii;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108702","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108702"}
{"incident_id":"SEA-CVE-2026-108706","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage permissions. Attackers can enumerate sequential ids against GET /api/s3Storage/download/{id} to collect URLs of all uploaded objects, exposing file contents on publicly readable buckets.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108706","failure_patterns":"SEA-FM-003","capabilities":"auth.infrastructure_modification;data.pii;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108706","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108706"}
{"incident_id":"SEA-CVE-2026-108707","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"WukongHRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header. Attackers gain HR administrator access to read payslips, salary history and employee personal data, download attachments, and modify or delete company-wide HR records.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108707","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108707","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108707"}
{"incident_id":"SEA-CVE-2026-108769","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108769","failure_patterns":"SEA-FM-006","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-108769","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108769"}
{"incident_id":"SEA-CVE-2026-108770","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser…","organization":"A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to resolve this issue. Patch name project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to resolve this issue. Patch name: 393255e7302ae5503331d45802e2eee01c6a47fe. You should upgrade the affected component.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108770","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108770","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108770"}
{"incident_id":"SEA-CVE-2026-108772","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/downloadcache.go of the component Cache Endpoint.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the component Cache Endpoint. Such manipulation of the argument File leads to path traversal. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108772","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.untrusted_external_text;arch.caching;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-108772","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108772"}
{"incident_id":"SEA-CVE-2026-108773","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. Performing a manipulation of the argument goodscode results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108773","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108773","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108773"}
{"incident_id":"SEA-CVE-2026-108774","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108774","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108774","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108774"}
{"incident_id":"SEA-CVE-2026-108775","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoticeController.java of the component Search Endpoint. The manipulation of the argument searchstr leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108775","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108775","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108775"}
{"incident_id":"SEA-CVE-2026-108777","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108777","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108777","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108777"}
{"incident_id":"SEA-CVE-2026-108778","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmIController.java of the component Inbound Quality Check Pda Interface. This manipulation of the argument searchstr causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108778","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108778","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108778"}
{"incident_id":"SEA-CVE-2026-108779","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmSttInGoodsController.java. Such manipulation of the argument searchstr leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108779","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108779","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108779"}
{"incident_id":"SEA-CVE-2026-108781","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of the argument searchstr results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108781","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108781","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108781"}
{"incident_id":"SEA-CVE-2026-108782","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java of the component Autocomplete Handler. Executing a manipulation of the argument trem/searchField/entityName can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108782","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108782","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108782"}
{"incident_id":"SEA-CVE-2026-108785","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter.","organization":"A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotely. The exploit has been published and may be used. Patch name project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotely. The exploit has been published and may be used. Patch name: 9bfc2fd2c4aaa4ac519e9152e65d673a5380de1a. To fix this issue, it is recommended to deploy a patch.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108785","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108785","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108785"}
{"incident_id":"SEA-CVE-2026-108786","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function runseoaudit of the file src/core/CrawlOrchestrator.ts of the component Crawler.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108786","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"auth.public_publication;data.pii;data.untrusted_external_text;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108786","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108786"}
{"incident_id":"SEA-CVE-2026-108787","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collectcorpus.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collect_corpus. Performing a manipulation of the argument sitemap_url results in server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108787","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"auth.public_publication;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108787","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108787"}
{"incident_id":"SEA-CVE-2026-108789","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108789","failure_patterns":"SEA-FM-010","capabilities":"data.pii;data.untrusted_external_text;arch.async_job;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108789","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108789"}
{"incident_id":"SEA-CVE-2026-108794","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/dbmigratesetting/ of the…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/db_migrate_setting/ of the component Database Migration Functionality. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108794","failure_patterns":"SEA-FM-002","capabilities":"auth.infrastructure_modification;auth.write_action;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108794","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108794"}
{"incident_id":"SEA-CVE-2026-108795","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API. Performing a manipulation results in improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108795","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108795","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108795"}
{"incident_id":"SEA-CVE-2026-108797","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108797","failure_patterns":"SEA-FM-003","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108797","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108797"}
{"incident_id":"SEA-CVE-2026-108799","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the…","organization":"A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108799","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108799","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108799"}
{"incident_id":"SEA-CVE-2026-108803","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A security vulnerability has been detected in yproject RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A security vulnerability has been detected in y_project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108803","failure_patterns":"","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108803","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108803"}
{"incident_id":"SEA-CVE-2026-108807","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysqlquery of the file source/adminregister.php of the component Registration…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql_query of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108807","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108807","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108807"}
{"incident_id":"SEA-CVE-2026-108819","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipulation of the argument code results in dynamically-managed code resources. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108819","failure_patterns":"SEA-FM-010","capabilities":"auth.public_publication;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108819","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108819"}
{"incident_id":"SEA-CVE-2026-108824","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java.","organization":"A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Patch name project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Patch name: 8509e218e6c1f0080eee9e379f269b2104785ef7. It is recommended to apply a patch to fix this issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108824","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108824","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108824"}
{"incident_id":"SEA-CVE-2026-108828","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel.","organization":"A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is publicly available and might be used. The vendor explains project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is publicly available and might be used. The vendor explains: \"set_function/use_function are not editable through any normal admin UI (only at plugin-install time via SQL, or via direct database access)\".","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108828","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.privileged_action;auth.write_action;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108828","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108828"}
{"incident_id":"SEA-CVE-2026-108876","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignations. Low-privileged attackers can supply user ids and a tenantId parameter or X-Tenant-Id header to restore ended, pending, or refused tenant memberships to normal.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108876","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108876","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108876"}
{"incident_id":"SEA-CVE-2026-108878","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration. Attackers can enumerate application ids via the unguarded /airag/app/listDict endpoint and query each id to obtain system prompts, memory prompts, model ids, knowledge base ids, and plugin bindings of other users' applications.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108878","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii;data.untrusted_external_text;arch.content_ingestion_rag","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108878","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108878"}
{"incident_id":"SEA-CVE-2026-108883","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-party application configurations.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-party application configurations. Low-privileged attackers can replace client id, client secret, agent id and corp id of DingTalk, WeCom or Feishu integrations to redirect directory synchronisation and messaging to attacker-controlled applications or break them.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108883","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-108883","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108883"}
{"incident_id":"SEA-CVE-2026-108902","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbitrary files.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picture_link parameter to remove other members' photos or configuration and cache files, causing content loss and denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108902","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-108902","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108902"}
{"incident_id":"SEA-CVE-2026-108904","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users() and user() return unfiltered…","organization":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::users() and user() return unfiltered database rows. Attackers holding a valid private API key can retrieve bcrypt password hashes, non-expiring hashValidation reset tokens, and TOTP secrets to take over accounts and bypass two-factor authentication.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108904","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-108904","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108904"}
{"incident_id":"SEA-CVE-2026-108939","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.9.4 is recommended to address this issue. The name of the patch is cfb8c6a0c42361dc4579a9110b54d339c255b9fd. The affected component should be upgraded.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108939","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-108939","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108939"}
{"incident_id":"SEA-CVE-2026-108940","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument save_cimatrix results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 0.9.4 is sufficient to fix this issue. The patch is named 8c81056712709b4845ec6d9531e4d35bab4a367c. It is suggested to upgrade the affected component.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108940","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-108940","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108940"}
{"incident_id":"SEA-CVE-2026-108952","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rxringbuffer as a Serial V2 rtserialrxfifo in functionenable().","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a Serial V2 rt_serial_rx_fifo in _function_enable(). A connected USB host configuring the CDC device triggers writes past the ring buffer into struct vcom members and an invalid rt_free() on close, causing denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108952","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-108952","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108952"}
{"incident_id":"SEA-CVE-2026-108956","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108956","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108956","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108956"}
{"incident_id":"SEA-CVE-2026-108959","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108959","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108959","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108959"}
{"incident_id":"SEA-CVE-2026-108963","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user.","organization":"databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --result-file=/app/public/index.php can write to index.php. In other words, quoting prevents OS command injection in mariadb-dump, but the argument injection alone is sufficient for code execution indirectly. NOTE project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --result-file=/app/public/index.php can write to index.php. In other words, quoting prevents OS command injection in mariadb-dump, but the argument injection alone is sufficient for code execution indirectly. NOTE: the project's composer.json file does not indicate an independently published databasement Composer package.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108963","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-108963","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108963"}
{"incident_id":"SEA-CVE-2026-108964","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108964","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108964","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108964"}
{"incident_id":"SEA-CVE-2026-108965","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108965","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-108965","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108965"}
{"incident_id":"SEA-CVE-2026-108980","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and the…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts, and the plugin.installPlugin tRPC procedure is open to any authenticated user. Thus, a name containing ../ sequences writes the downloaded plugin files outside the plugins directory. Because the official Docker image runs as root, an authenticated attacker overwrites a root-owned startup file and achieves remote code execution as root. Self-registration for an account may be possible.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108980","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-108980","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108980"}
{"incident_id":"SEA-CVE-2026-108982","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service (go-nfsv4) and its associated VeraCrypt core-service helper processes…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service (go-nfsv4) and its associated VeraCrypt core-service helper processes when a volume is dismounted. After VeraCrypt reports the volume as dismounted, the auxiliary mount continues to serve the decrypted volume image (volume.dmg) over a loopback SMB session, and the leaked processes retain an open handle to the underlying raw device. A local user or process can therefore remount and access the decrypted volume without the passphrase, e.g., by reopening a previously accessed path (such as through a macOS Open Recent menu) or by attaching volume.dmg from the stale auxiliary mount. (The macFUSE build of VeraCrypt is not affected.)","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108982","failure_patterns":"","capabilities":"auth.destructive_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108982","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-108982"}
{"incident_id":"SEA-CVE-2026-109193","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ' (e.g.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute slug> (e.g. hp_custom_link)' parameter in all versions up to, and including, 1.7.32 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that an administrator has configured a custom user attribute with a display_format template placing the %value% token inside an href, src, or style attribute context, which is a documented and expected use of the plugin's attribute display feature.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109193","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109193","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109193"}
{"incident_id":"SEA-CVE-2026-109200","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without scheme or host allowlisting. Authenticated users can upload XML documents whose stylesheet href points to internal http, ftp, file, or jar URLs, forcing server requests and applying attacker-controlled XSLT during conversion.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109200","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-109200","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109200"}
{"incident_id":"SEA-CVE-2026-109221","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copyfile function in all versions up to, and…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copy_file function in all versions up to, and including, 4.9.3 This makes it possible for authenticated attackers, with Sales Representative-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This is exploitable by any user holding the plugin-defined import_contacts capability, which is granted by default to the plugin's custom Sales Representative role.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109221","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-109221","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109221"}
{"incident_id":"SEA-CVE-2026-109237","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrappers. Attackers can send a laundered LLMConfig with api_token set to an env reference via /config/dump to read SECRET_KEY and provider keys, enabling admin JWT forgery.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109237","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-109237","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109237"}
{"incident_id":"SEA-CVE-2026-109247","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"FreeRDP before 3.32.0 contains a path traversal vulnerability in convertfiledescriptorstofilelist() in winpr/libwinpr/clipboard/syntheticfile.c, which concatenates server-supplied cFileName values from…","organization":"FreeRDP before 3.32.0 contains a path traversal vulnerability in convertfiledescriptorstofilelist() in winpr/libwinpr/clipboard/syntheticfile.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates server-supplied cFileName values from FileGroupDescriptorW clipboard data into the published local file:// URI without rejecting '/' or '..' sequences. A malicious RDP server can supply '../' sequences so the user's next clipboard paste copies an arbitrary local file readable by the client user instead of the expected remote file.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109247","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-109247","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109247"}
{"incident_id":"SEA-CVE-2026-109262","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109262","failure_patterns":"SEA-FM-006","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109262","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109262"}
{"incident_id":"SEA-CVE-2026-109267","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109267","failure_patterns":"SEA-FM-006","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109267","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109267"}
{"incident_id":"SEA-CVE-2026-109272","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109272","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109272","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109272"}
{"incident_id":"SEA-CVE-2026-109282","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109282","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109282","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109282"}
{"incident_id":"SEA-CVE-2026-109283","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and keeps the user's existing role when no…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and keeps the user's existing role when no roles claim is found, ignoring roles sent only in the ID token. Users with a linked account whose identity provider role no longer satisfies the OAuth role policy can send a valid provider access token to POST /api/v1/auths/oauth/{provider}/token/exchange to obtain a session retaining their previous role.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109283","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109283","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109283"}
{"incident_id":"SEA-CVE-2026-109284","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/{id}/fork on chats they created there while they had write access, inserting attacker-controlled chats visible to the folder owner and members.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109284","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109284","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109284"}
{"incident_id":"SEA-CVE-2026-109286","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages.","organization":"Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated stats export request to the auths endpoint, receiving the victim's JWT for full API access.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109286","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.untrusted_external_text;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-109286","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109286"}
{"incident_id":"SEA-CVE-2026-109287","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directoryid belongs to the requested knowledge base.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directory_id belongs to the requested knowledge base. Users with read access to any knowledge base can supply a retained foreign directory UUID to GET /api/v1/knowledge/{id}/files. The returned breadcrumbs expose folder names, owner user ids and knowledge base ids of that directory and all its ancestors.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109287","failure_patterns":"","capabilities":"data.pii;arch.content_ingestion_rag","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109287","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109287"}
{"incident_id":"SEA-CVE-2026-109288","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme.","organization":"Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme. Authenticated users can embed javascript project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme. Authenticated users can embed javascript: links in shared chats that, when clicked by a victim, steal the victim's JWT from local storage, including admins' tokens.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109288","failure_patterns":"","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109288","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109288"}
{"incident_id":"SEA-CVE-2026-109289","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated users can keep running commands and reading or writing files on the terminal server.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109289","failure_patterns":"SEA-FM-003","capabilities":"auth.code_execution;data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109289","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109289"}
{"incident_id":"SEA-CVE-2026-109290","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing administrator's session token from local storage and take over the instance.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109290","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-109290","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109290"}
{"incident_id":"SEA-CVE-2026-109292","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal servers can capture forwarded session cookies from routine requests and replay them to hijack accounts, including administrators.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109292","failure_patterns":"","capabilities":"auth.code_execution;auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":true,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109292","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109292"}
{"incident_id":"SEA-CVE-2026-109293","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of read-only shared tools, exposing embedded API keys and credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109293","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-109293","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109293"}
{"incident_id":"SEA-CVE-2026-109294","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages. Attackers can point the image field at a host returning gzip-encoded responses, which get_image_base64_from_url decompresses unbounded, causing denial of service for all users.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109294","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109294","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109294"}
{"incident_id":"SEA-CVE-2026-109295","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns. Attackers can instruct the model to call grep_knowledge_files or grep_chat_files with a catastrophically backtracking regex, blocking the event loop for two seconds per repeated call.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109295","failure_patterns":"SEA-FM-006","capabilities":"data.pii;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109295","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109295"}
{"incident_id":"SEA-CVE-2026-109296","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend index. Attackers can pass the index as a path segment or query parameter on Ollama and OpenAI-compatible listing routes to trigger requests carrying configured API keys, read version strings, and enumerate connections.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109296","failure_patterns":"SEA-FM-003","capabilities":"data.pii","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109296","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109296"}
{"incident_id":"SEA-CVE-2026-109297","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it. Users permitted to create automations can submit whitespace-folded rules (or, in 0.11.0, lowercase frequencies or omitted RRULE prefixes) that expand per-second synchronously, blocking the shared event loop for minutes per request and on every scheduler poll.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109297","failure_patterns":"SEA-FM-006","capabilities":"data.pii;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109297","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109297"}
{"incident_id":"SEA-CVE-2026-109299","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsatisfiable recurrence rules. Attackers can repeatedly send rules like February 30th to the automations create or update endpoints, blocking the shared event loop for seconds per request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109299","failure_patterns":"SEA-FM-006","capabilities":"auth.privileged_action;auth.write_action;data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109299","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109299"}
{"incident_id":"SEA-CVE-2026-109300","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes. Authenticated users can post crafted channel messages, chat messages, or citation content that runs JavaScript in viewers' browsers, enabling in-app phishing, or session hijacking where iframeSandboxAllowSameOrigin is enabled.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109300","failure_patterns":"","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109300","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109300"}
{"incident_id":"SEA-CVE-2026-109305","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the \"has some\" and \"has every\" operators.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the \"has some\" and \"has every\" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates to execute code as the web user.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109305","failure_patterns":"","capabilities":"auth.code_execution;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109305","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109305"}
{"incident_id":"SEA-CVE-2026-109309","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path to gin's Context.File without validation.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path to gin's Context.File without validation. Attackers supplying a malicious kernel plugin can return an absolute path to read any file readable by the SiYuan process, including the API token and conf.json.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109309","failure_patterns":"SEA-FM-002","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-109309","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109309"}
{"incident_id":"SEA-CVE-2026-109310","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion. A publish reader, or anyone when publish auth is disabled, can use uncapped functions like until to OOM-kill the kernel with one request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109310","failure_patterns":"SEA-FM-006","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109310","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109310"}
{"incident_id":"SEA-CVE-2026-109312","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA session is fully authorized.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA session is fully authorized. Attackers with a victim's password who can publish a page form without an access rule can invoke update_user before completing 2FA to disable twofa_enabled and take over the account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109312","failure_patterns":"SEA-FM-003","capabilities":"auth.public_publication;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109312","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109312"}
{"incident_id":"SEA-CVE-2026-109313","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration. Attackers can obtain a persistent remember-me cookie after the password step and restore it as a fully authorized session without completing the second factor.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109313","failure_patterns":"SEA-FM-003","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109313","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109313"}
{"incident_id":"SEA-CVE-2026-109314","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route.","organization":"Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route. When a victim opens an emailed reset link, the publisher-controlled page rendered by Login project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route. When a victim opens an emailed reset link, the publisher-controlled page rendered by Login::getPage() exposes the username and bearer token, enabling takeover of more privileged accounts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109314","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-109314","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109314"}
{"incident_id":"SEA-CVE-2026-109315","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omits system.debugger.token.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omits system.debugger.token. Attackers can render the token through editor-authored Twig and supply it as X-Clockwork-Auth to read profiler records with configuration, request metadata, and database queries.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109315","failure_patterns":"","capabilities":"auth.code_execution;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109315","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109315"}
{"incident_id":"SEA-CVE-2026-109316","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin integration. Attackers can send a request with the delete parameter and known data type and filename to remove files under user/data/, including form submissions, or forge requests lacking CSRF nonce checks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109316","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109316","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109316"}
{"incident_id":"SEA-CVE-2026-109317","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants. Attackers with api.users.write can edit account access maps or invitations so the inheriting permission resolver satisfies requireSuper checks, accessing super-only API endpoints.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109317","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-109317","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109317"}
{"incident_id":"SEA-CVE-2026-109318","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into profile fields. When the gravuser or gravfull author mode is enabled, attackers can set a malicious username, full name, or email that reaches PHP exec() via git commit --author, running commands as the web-server account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109318","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-109318","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109318"}
{"incident_id":"SEA-CVE-2026-109319","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator's session via nonce-less GET requests, can delete or approve Guestbook entries.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109319","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109319","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109319"}
{"incident_id":"SEA-CVE-2026-109320","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows disabled accounts to keep API access, because SessionAuthenticator does not enforce account state.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows disabled accounts to keep API access, because SessionAuthenticator does not enforce account state. Disabled users can reuse an already authorized browser or remember-me session to call API endpoints until expiry, defeating operator revocation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109320","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109320","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109320"}
{"incident_id":"SEA-CVE-2026-109321","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic .","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic <provider>.<id> username and an unsalted MD5 hash of the provider identifier as the password, without disabling password login. Unauthenticated remote attackers who learn or guess a provider identifier can reproduce these credentials and log in, gaining administrative control of privileged accounts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109321","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-109321","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109321"}
{"incident_id":"SEA-CVE-2026-109322","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery. Unauthenticated visitors can submit markup that executes in other visitors' browsers and, in versions 0.5.0 and 0.5.1, in administrator moderation sessions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109322","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109322","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109322"}
{"incident_id":"SEA-CVE-2026-109324","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images. Attackers can reference a Twig or Markdown transform so GD or Imagick decodes the full source without dimension checks, letting anonymous requests repeatedly cause page unavailability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109324","failure_patterns":"SEA-FM-006","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109324","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109324"}
{"incident_id":"SEA-CVE-2026-109325","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback REMOTE_ADDR values. Unauthenticated attackers behind a same-host HTTP proxy can read profiler records exposing system and plugin configuration, secrets, request metadata, and queries.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109325","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109325","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109325"}
{"incident_id":"SEA-CVE-2026-109328","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRSTNAME registration value into an unencoded data-message attribute.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRST_NAME registration value into an unencoded data-message attribute. Attackers can register with a double-quoted event handler that executes JavaScript in an administrator's session when they hover the entry on the Manage registrations page.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109328","failure_patterns":"","capabilities":"auth.privileged_action;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109328","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109328"}
{"incident_id":"SEA-CVE-2026-109329","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. Attackers can submit crafted assign requests to members_assignment.php with a foreign role UUID to gain privileged membership, log into that organization, and edit its user profiles.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109329","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109329","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109329"}
{"incident_id":"SEA-CVE-2026-109330","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation. Attackers can lure a victim running the dashboard to a malicious page that opens a WebSocket to the loopback dashboard and exfiltrates agent IDs, roles, task descriptions, and token budgets.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109330","failure_patterns":"SEA-FM-010","capabilities":"arch.event_driven;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109330","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109330"}
{"incident_id":"SEA-CVE-2026-109331","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field. A prompt-injected agent can place dangerous payloads in fields like Write content or an MCP script parameter beside a benign file_path or command, evading denyPatterns to write web shells or execute scripts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109331","failure_patterns":"SEA-FM-010","capabilities":"auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109331","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109331"}
{"incident_id":"SEA-CVE-2026-109332","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer.handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page with a localhost Origin visited by a victim can read unauthenticated endpoints like /health cross-origin.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109332","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109332","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109332"}
{"incident_id":"SEA-CVE-2026-109334","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user authenticated, allowing cross-tenant access.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user authenticated, allowing cross-tenant access. An authenticated attacker can set the Surreal-NS/Surreal-DB headers on /sql or call the RPC use method to read, create, modify, and delete rows and read DEFINE PARAM values in another tenant where table PERMISSIONS allow it.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109334","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109334","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109334"}
{"incident_id":"SEA-CVE-2026-109338","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values in embedded JavaScript.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values in embedded JavaScript. Attackers with scripting enabled can read such values via Headers get(), entries(), values(), or getSetCookie(), or return them from fetch() endpoints, aborting the server process.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109338","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109338","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109338"}
{"incident_id":"SEA-CVE-2026-109346","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting clientid and scope.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then redeem it at /device/token for a live session token.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109346","failure_patterns":"SEA-FM-012","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-109346","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109346"}
{"incident_id":"SEA-CVE-2026-109347","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements with a UTF-8 byte-order mark. Attackers can attach a database file at a PHP-served path and create a table named with PHP code to execute it as the web server user.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109347","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-109347","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109347"}
{"incident_id":"SEA-CVE-2026-109348","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::frombytes.","organization":"Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes. Attackers can commit a crafted .mailmap with descending-ordered entries forcing repeated front inserts, blocking workers running log, blame, or shortlog for minutes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109348","failure_patterns":"SEA-FM-006","capabilities":"arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109348","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109348"}
{"incident_id":"SEA-CVE-2026-109350","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFSDELTA entries.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFS_DELTA entries. Attackers can serve a thin pack with a REF_DELTA referencing an existing object followed by an OFS_DELTA whose base_distance exceeds pack_offset, triggering a panic in LookupRefDeltaObjectsIter that aborts the fetch process.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109350","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109350","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109350"}
{"incident_id":"SEA-CVE-2026-109352","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during…","organization":"LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored device's SNMP agent can set values such as AI-AP-MIB project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensor_descr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored device's SNMP agent can set values such as AI-AP-MIB::aiSSID to malicious JavaScript that executes when authenticated users view the device's Wireless tab, enabling session hijacking.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109352","failure_patterns":"SEA-FM-010","capabilities":"data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109352","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109352"}
{"incident_id":"SEA-CVE-2026-109353","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notificationid parameter to notifications.inc.php.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notifications.inc.php. Attackers can perform cross-table reads of users.password hashes, with results persisted in notifications_attribs and readable through the interface.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109353","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109353","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109353"}
{"incident_id":"SEA-CVE-2026-109354","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsenchannelcommon.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequences into the channel parameter. Attackers with access to one NFSen-enabled device can request graph.php with a traversed channel value to view traffic and NetFlow graphs of devices outside their authorized scope.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109354","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-109354","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109354"}
{"incident_id":"SEA-CVE-2026-109362","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal.","organization":"Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal. Attackers can mint a token with a TTL up to 10 years, which the owner cannot list or revoke, and repeatedly run the workflow consuming shared credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109362","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109362","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109362"}
{"incident_id":"SEA-CVE-2026-109373","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forging unsigned session cookies. Attackers can guess time-ordered session IDs around a victim's sign-in and supply them with empty tokens to receive rotated tokens, taking over accounts including MFA-completed administrator sessions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109373","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109373","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109373"}
{"incident_id":"SEA-CVE-2026-109382","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp_get_posts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate() method accepts any logged-in user, and the wsp_execute_get_posts() callback honouring a caller-supplied status=all argument that expands into a WP_Query over 'publish', 'draft', 'pending' and 'future' posts with no author or ownership filter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the titles, URLs, authors, categories, tags and 40-word excerpts of every unpublished (draft/pending/scheduled) post on the site.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109382","failure_patterns":"SEA-FM-010","capabilities":"auth.public_publication;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109382","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109382"}
{"incident_id":"SEA-CVE-2026-109383","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options through a JSON-based deep clone before forwarding them to each per-origin pool, and because JSON cannot represent functions, a caller-supplied tls option containing a checkServerIdentity callback is silently dropped before it reaches the TLS layer. As a result, a TLS peer whose certificate a custom checkServerIdentity was written to reject, but which passes Node's default hostname and chain checks, is silently accepted. Because Agent is the default dispatcher behind request, fetch, and setGlobalDispatcher, this affects the path most applications use, and EnvHttpProxyAgent is affected on its direct and no-proxy routes as well, while only applications that pass a function-valued tls option such as a custom checkServerIdentity for certificate or public-key pinning are at risk. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, which preserve the tls option outside the JSON clone so custom verification callbacks are forwarded unchanged, and users should upgrade to one of those versions or later. As a workaround, pass the TLS options through connect instead of tls, or for proxied destinations use requestTls and proxyTls.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109383","failure_patterns":"SEA-FM-010","capabilities":"auth.public_publication;data.pii;arch.external_api;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109383","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109383"}
{"incident_id":"SEA-CVE-2026-109390","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload length value is not validated.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109390","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-109390","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109390"}
{"incident_id":"SEA-CVE-2026-109400","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via…","organization":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via addmanagementpage() using a role name returned by InstaWPSetting project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plugin registering its admin page via add_management_page() using a role name returned by InstaWP_Setting::get_allowed_role() as the required capability — which WordPress resolves as a real capability match for any user holding that role — combined with generate_section_field() rendering the master API key from the instawp_api_options option directly as the value attribute of a plain-text HTML input with no additional manage_options or equivalent capability check. This makes it possible for authenticated attackers with Subscriber-level access and above to read the plaintext master API key, use its SHA-256-derived secret as a bearer token accepted by the plugin's REST API validate_api_request(), and call POST /wp-json/instawp-connect/v2/auto-login to mint a 30-second single-use login URL that sets an administrator authentication cookie — fully escalating their privileges. Exploitation requires the site to be actively connected to InstaWP and an administrator to have added the attacker's role to the plugin's Sync Tab Access list (instawp_sync_tab_roles); notably, the settings tab suppression logic only hides the tab when administrator is absent from the list entirely, meaning a mixed configuration retaining administrator alongside a lower role still serves the full settings page — including the API key — to the lower-privileged user.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109400","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-109400","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109400"}
{"incident_id":"SEA-CVE-2026-109414","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'srcby[].val.start / srcby[].val.end (operator 'bt')' parameter in all versions up to, and including,…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'bt')' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with vendor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is an incomplete fix for a previously patched SQL injection (version 3.6.0), which addressed only the gt/lt/le/ge operators while leaving the 'bt' (BETWEEN) operator branch unpatched.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109414","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109414","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109414"}
{"incident_id":"SEA-CVE-2026-109430","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAdvisor/WebAdvisor endpoint without disabling external entity and DTD resolution. Attackers can exploit this flaw to force the server into SSRF requests, coerce NTLMv2 hash disclosure via attacker-controlled SMB shares, and read arbitrary files from the underlying Windows host through an out-of-band error-based channel. WebAdvisor entered end-of-support status in June 2022 and users are encouraged to migrate to Colleague Self-Service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109430","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-109430","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109430"}
{"incident_id":"SEA-CVE-2026-109447","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter…","organization":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter handled by the wppbaddmetatouseronactivation() function. The vulnerability exists because the activation handler passes the attacker-supplied role value directly to WPUser project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3 via the role parameter handled by the wppb_add_meta_to_user_on_activation() function. The vulnerability exists because the activation handler passes the attacker-supplied role value directly to WP_User::set_role() with no allow-list validation, and the 4.0.3 reserved-name check exempts pre-existing form fields from the block, allowing a legacy field with meta-name role to persist and bridge attacker-controlled request input into the serialized signup record stored in wp_signups. This makes it possible for unauthenticated attackers to gain a fully activated WordPress administrator account by submitting role=administrator through the public [wppb-register] shortcode form and subsequently clicking the confirmation activation link. Exploitation requires the site to have a legacy form field with meta-name role carried over from before the 4.0.3 upgrade, email confirmation enabled, and open user registration — all stable site-state conditions once established.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109447","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-109447","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109447"}
{"incident_id":"SEA-CVE-2026-109515","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the subscribe_to_email_list endpoint accepting an attacker-supplied optin_data[form_custom_field_mappings] parameter without any allow-list validation on destination keys, allowing the attacker-controlled mapping to override the administrator's saved mapping and pass arbitrary wp_users column names — including ID and user_pass — directly into wp_insert_user() via the subscribe() function. This makes it possible for unauthenticated attackers to force wp_insert_user() into UPDATE mode on any existing account by supplying a target user's numeric ID, overwrite that account's password with a pre-hashed value of their choosing, and thereby take over any WordPress user account — including administrators — leading to full site compromise. Exploitation requires that a WordPress User Registration opt-in form is published somewhere on the site, though the form's UUID is visible in page source and no authentication, nonce, or capability check is required to reach the vulnerable endpoint.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109515","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-109515","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109515"}
{"incident_id":"SEA-CVE-2026-109521","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109521","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109521","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109521"}
{"incident_id":"SEA-CVE-2026-109522","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109522","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.public_publication;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109522","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109522"}
{"incident_id":"SEA-CVE-2026-109523","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109523","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109523","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109523"}
{"incident_id":"SEA-CVE-2026-109572","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users' terminals and modify terminal policies, injecting environment variables into other users' terminals.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109572","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-109572","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109572"}
{"incident_id":"SEA-CVE-2026-109573","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NOBACKSLASHESCAPES mode.","organization":"phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NO_BACKSLASH_ESCAPES mode. Unauthenticated attackers can send a Unicode right single quotation mark in the search parameter of api/autocomplete, which is normalized to an ASCII quote, to read credentials and configuration secrets, modify records, or drop tables.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109573","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109573","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109573"}
{"incident_id":"SEA-CVE-2026-109575","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops security controls across multiple…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops security controls across multiple transport types. When a TLS Certificate Authority (tls_ca) is configured and a numeric TLS port (tls_port) is specified, the application globally disables Basic authentication on its shared internal request handler. Because this handler is shared concurrently among HTTP, HTTPS, and UNIX domain socket listeners, and mutual TLS (mTLS) client certificate verification (tls.RequireAndVerifyClientCert) is enforced exclusively on the HTTPS server path, all other simultaneously active non-mTLS listeners fail open. Consequently, an unauthenticated attacker capable of reaching an affected HTTP or UNIX management endpoint can completely bypass credentials to gain full API administrative access. This allows unauthorized remote or local actors to read sensitive, cleartext HAProxy configuration data or replace the managed configuration entirely via the raw configuration endpoint. This has been fixed in versions 3.4.4, 3.3.9, 3.2.17, 3.0.25, 2.9.29, and their respective EE backports by migrating to a per-request TLS connection-state validation model.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109575","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-109575","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109575"}
{"incident_id":"SEA-CVE-2026-109598","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelisted sendsms API endpoint, which does not verify that the caller is permitted to send SMS messages.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelisted send_sms API endpoint, which does not verify that the caller is permitted to send SMS messages. Users lacking the required permissions can invoke send_sms to send arbitrary SMS messages that impersonate the Company.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109598","failure_patterns":"SEA-FM-003","capabilities":"auth.external_communication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109598","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109598"}
{"incident_id":"SEA-CVE-2026-109603","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side request forgery and local file inclusion.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side request forgery and local file inclusion. Authenticated attackers can supply crafted content to PDF rendering to make the server fetch internal resources or embed local server files in generated PDFs.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109603","failure_patterns":"SEA-FM-002","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-109603","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109603"}
{"incident_id":"SEA-CVE-2026-109604","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping. An authenticated user able to create such records can give them malicious names, executing script in the session of any user who later opens that tool.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109604","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109604","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109604"}
{"incident_id":"SEA-CVE-2026-109608","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation. Any authenticated user, including one with no assigned roles, can send specially crafted requests to read other users' sensitive information and escalate to a privileged account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109608","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109608","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109608"}
{"incident_id":"SEA-CVE-2026-109609","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the ERPNext database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109609","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109609","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109609"}
{"incident_id":"SEA-CVE-2026-109612","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup without escaping.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup without escaping. Authenticated users able to create records can store crafted record names that execute script in the session of any user who later opens the report.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109612","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109612","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109612"}
{"incident_id":"SEA-CVE-2026-109626","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109626","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109626","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109626"}
{"incident_id":"SEA-CVE-2026-109631","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter database queries. Authenticated attackers with low privileges can send specially crafted requests to these endpoints to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109631","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109631","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109631"}
{"incident_id":"SEA-CVE-2026-109633","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user's session, executing script to act as that user and take over the account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109633","failure_patterns":"","capabilities":"auth.privileged_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109633","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109633"}
{"incident_id":"SEA-CVE-2026-109634","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high privileges can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109634","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109634","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109634"}
{"incident_id":"SEA-CVE-2026-109638","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109638","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109638","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109638"}
{"incident_id":"SEA-CVE-2026-109639","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers with low privileges can send specially crafted requests to the affected endpoints to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109639","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109639","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109639"}
{"incident_id":"SEA-CVE-2026-109646","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated low-privileged attackers can send specially crafted requests to these endpoints to inject SQL and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109646","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109646","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109646"}
{"incident_id":"SEA-CVE-2026-109647","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation. Authenticated attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the ERPNext database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109647","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109647","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109647"}
{"incident_id":"SEA-CVE-2026-109648","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send specially crafted requests to inject SQL into database queries and extract sensitive information from the underlying database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109648","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109648","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109648"}
{"incident_id":"SEA-CVE-2026-109649","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database queries. Authenticated attackers can send specially crafted requests to the affected endpoints to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109649","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109649","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109649"}
{"incident_id":"SEA-CVE-2026-109651","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common operational roles, that accepts an arbitrary outbound…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common operational roles, that accepts an arbitrary outbound request destination without validation. Authenticated attackers can set the field to hosts of their choosing, making the server issue requests to addresses reachable only from inside the deployment's network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109651","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-109651","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109651"}
{"incident_id":"SEA-CVE-2026-109652","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context. Authenticated attackers holding a common operational role can inject template expressions to read and write arbitrary database data, delete documents, send outbound requests from the server, and send mail from the site.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109652","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.destructive_action;auth.write_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109652","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109652"}
{"incident_id":"SEA-CVE-2026-109663","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers can send specially crafted requests to these endpoints to manipulate database queries and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109663","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109663","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109663"}
{"incident_id":"SEA-CVE-2026-109674","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by missing input validation.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by missing input validation. Remote authenticated attackers can send specially crafted requests to the affected endpoints to manipulate database queries and extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109674","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109674","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109674"}
{"incident_id":"SEA-CVE-2026-109758","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installation templates contain a default credential which the installer copies into the active configuration; the installer and configuration script do not automatically replace that value with a random token. An attacker who knows the default token can authenticate to the SCIM API and perform user and group operations allowed by the configured provisioning backend. This issue can be chained with CVE-2026-61834 in affected releases of the scim-patch dependency. This vulnerability exists in version 2022.1 - 2025.2 of HAS however the underlying defect was removed in version 2026.1 which was released July 17th 2026. The vulnerability was identified in older versions of HAS after version 2026.1 was released.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109758","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109758","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109758"}
{"incident_id":"SEA-CVE-2026-109768","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109768","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109768","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109768"}
{"incident_id":"SEA-CVE-2026-109773","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109773","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109773","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109773"}
{"incident_id":"SEA-CVE-2026-109775","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109775","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109775","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109775"}
{"incident_id":"SEA-CVE-2026-109781","evidence_tier":"security_advisory","title":"Security issue reported in Denial-of-service in the Printing","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Denial-of-service in the Printing project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109781","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109781","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109781"}
{"incident_id":"SEA-CVE-2026-109812","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the disclosure of confidential data, including cryptographic key material.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109812","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-109812","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109812"}
{"incident_id":"SEA-CVE-2026-109829","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handler changes the origin, so a response produced after a cross-origin redirect is stored under the original key. An attacker who controls the target of a redirect from a trusted URL can have their response cached under that trusted URL and served to later callers, allowing persistent cache poisoning, and the same key confusion lets a private, non-stored redirect response to a user-specific resource be stored under the original URL and served to a later unauthenticated caller, disclosing private data. Applications are affected only when an originless Agent, a shared cache store, and the redirect-then-cache composition are all used. The issue is fixed in undici 7.30.1 and 8.12.2, which verify the producing origin still matches the cache key and preserve each redirect hop's cache-control policy before storing, and users should upgrade to one of those versions or later. As a workaround, compose the cache interceptor before the redirect interceptor, use per-origin dispatchers and cache stores, or disable shared caching on redirect-capable requests.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109829","failure_patterns":"SEA-FM-010","capabilities":"auth.write_action;data.pii;arch.caching;arch.external_api;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109829","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109829"}
{"incident_id":"SEA-CVE-2026-109832","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLSEAGAIN and GNUTLSEINTERRUPTED) are handled with an unbounded busy loop instead…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC TLS listener can cause the event-loop thread to spin at high CPU with no forward progress, resulting in denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109832","failure_patterns":"SEA-FM-006","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109832","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109832"}
{"incident_id":"SEA-CVE-2026-109841","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifies Subresource Integrity metadata by matching the algorithm token against a…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifies Subresource Integrity metadata by matching the algorithm token against a lowercase-only set, even though the SRI specification defines the token by its ASCII-lowercase form, so a valid but non-lowercase token such as an uppercase or mixed-case SHA256 is treated as unknown and skipped. When no recognized algorithm remains, undici treats the integrity list as empty and accepts the response, so a server returning a body that does not match the pinned digest passes the check. An attacker who controls only the response body can therefore deliver attacker-controlled bytes to an application that pinned a valid uppercase or mixed-case SRI token, with no integrity error, affecting response integrity only. The issue is fixed in undici 7.30.1 and 8.12.2, which normalize the algorithm token to ASCII lowercase before validation, and users should upgrade to one of those versions or later. As a workaround, use lowercase algorithm tokens such as sha256, sha384, or sha512 in integrity metadata.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109841","failure_patterns":"","capabilities":"data.pii;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109841","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109841"}
{"incident_id":"SEA-CVE-2026-109855","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the…","organization":"undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2 project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the underlying HTTP/2 stream is left open with no error listener. When a malicious server then destroys the connection, the orphaned stream emits an unhandled error and the Node.js process exits. A remote, unauthenticated server can therefore crash any client that opens a WebSocket to it over HTTP/2, resulting in a denial of service. The issue is fixed in undici 8.11.2, and users should upgrade to 8.11.2 or later. As a workaround, set allowH2 to false to disable HTTP/2 for WebSocket connections, or avoid opening WebSocket connections to untrusted servers.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109855","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;data.pii;arch.external_api;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109855","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109855"}
{"incident_id":"SEA-CVE-2026-109869","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js process when a malicious server returns a response with more than five content codings and closes the connection before sending the body. undici rejects such responses because of a content-encoding limit, but it created the internal response stream before that check and returned without attaching an error listener or aborting the request, so the early close surfaces a content-length mismatch on the orphaned stream, which Node.js treats as an unhandled error and terminates the process. A remote, unauthenticated server can trigger this with a single response, even when the application correctly catches the fetch() rejection, resulting in a denial of service. The issue is fixed in undici 6.29.1, 7.30.1, and 8.12.2, and users should upgrade to one of those versions or later. There is no workaround.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109869","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;data.pii;arch.external_api;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-109869","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109869"}
{"incident_id":"SEA-CVE-2026-109901","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109901","failure_patterns":"SEA-FM-002","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-109901","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109901"}
{"incident_id":"SEA-CVE-2026-109998","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping.","organization":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable because the wpajaxnoprivmbtemplate endpoint is publicly accessible without authentication, nonce verification is not enforced for the contentreply mode, and admin-ajax.php responds with Content-Type project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable because the wp_ajax_nopriv_mb_template endpoint is publicly accessible without authentication, nonce verification is not enforced for the content_reply mode, and admin-ajax.php responds with Content-Type: text/html, causing browsers to execute injected tags embedded in the JSON response body.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109998","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-109998","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-109998"}
{"incident_id":"SEA-CVE-2026-110002","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combined with insufficient sanitization of the pluginURL parameter before it is written to a web-executable PHP file. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The save-to-cache.php script is directly reachable without loading WordPress; FILTER_SANITIZE_URL — the only filter applied to the pluginURL value — preserves the characters required to craft a valid PHP payload, which is then written verbatim into cached-content/cached-feed.php and immediately executable via a single GET request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110002","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;auth.public_publication;data.uploaded_files;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-110002","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110002"}
{"incident_id":"SEA-CVE-2026-110013","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress plugin before 10.31.9 and the second at which a token was issued. An attacker able to constrain when a staff or administrator token was issued can compute a valid token and access the booking API as that user, including an administrator.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110013","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-110013","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110013"}
{"incident_id":"SEA-CVE-2026-110014","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers to create bookings attributed to arbitrary users, overwrite those users' stored contact details, and mark bookings as paid or confirmed without any payment.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110014","failure_patterns":"","capabilities":"auth.financial_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-110014","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110014"}
{"incident_id":"SEA-CVE-2026-110015","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator into clicking a crafted link to forge requests in that administrator's browser, up to creating a new administrator account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110015","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-110015","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110015"}
{"incident_id":"SEA-CVE-2026-110017","evidence_tier":"security_advisory","title":"The Quick PayPal Payments issue could run attacker-controlled scripts in a browser","summary":"The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input…","organization":"The Quick PayPal Payments project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because wp_kses_post strips only HTML tags, a quote-breaking payload containing no angle brackets survives post save intact, and the injected script fires for every viewer of the post — including higher-privileged Editors and Administrators who routinely preview a Contributor's pending content.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110017","failure_patterns":"","capabilities":"auth.financial_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-110017","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110017"}
{"incident_id":"SEA-CVE-2026-110019","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to create, modify, and delete LPagery-managed WordPress pages and bulk page-generation processes that are otherwise restricted to administrators. On default fresh installations where Freemius has not been opted into, the AES-256-CBC key used to validate Bearer tokens collapses to the publicly known SHA-256 hash of an empty string, making the token entirely forgeable by any authenticated user.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110019","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110019","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110019"}
{"incident_id":"SEA-CVE-2026-110179","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected administrative list screen requires only a…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected administrative list screen requires only a lower-privilege capability rather than an administrator one, so users with editor-level access and above can perform SQL injection and read arbitrary information from the database. On multisite a sub-site editor can read the network-global users table, including the super administrator's password hash.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110179","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-110179","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110179"}
{"incident_id":"SEA-CVE-2026-110248","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Insertion of sensitive information into log files in the gitutils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because the runclone_command() function does not redact credentials from subprocess error output. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK V3 3.10.0 or V2 2.257.3.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110248","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-110248","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110248"}
{"incident_id":"SEA-CVE-2026-110284","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlms_checkout] shortcode. This is due to the llms_get_template() helper performing extract() on the shortcode attribute array before resolving the template path, which allows the attacker-supplied 'template_name' and 'default_path' shortcode attributes to overwrite the function's local parameters and ultimately control the path passed to a PHP include. This makes it possible for authenticated attackers, with Instructor-level access and above, to include and execute arbitrary files on the server, that can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where files with safe extensions containing attacker-controlled content can be uploaded and included.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110284","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-110284","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110284"}
{"incident_id":"SEA-CVE-2026-110287","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110287","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110287","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110287"}
{"incident_id":"SEA-CVE-2026-110359","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\\Hyland\\DesktopHost\\bin folder with weak permissions. A local user can exploit this to escalate privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110359","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-110359","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110359"}
{"incident_id":"SEA-CVE-2026-110362","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway: from n/a through 1.3.3.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110362","failure_patterns":"SEA-FM-003","capabilities":"auth.financial_action;auth.privileged_action;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110362","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110362"}
{"incident_id":"SEA-CVE-2026-110385","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account. The Document Builder API improperly processes user-controlled converter XML supplied through the optional third argument of builder.SaveFile(). By injecting a duplicate m_sFileTo element, an attacker can override the server-generated output path and write arbitrary content outside the designated job directory. This allows the attacker to overwrite the runtime.json configuration file, modify the Document Builder executable path and arguments, and execute arbitrary commands when a subsequent Document Builder job is processed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110385","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-110385","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110385"}
{"incident_id":"SEA-CVE-2026-110447","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110447","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-110447","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110447"}
{"incident_id":"SEA-CVE-2026-110459","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110459","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110459","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110459"}
{"incident_id":"SEA-CVE-2026-110590","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying that a user is authorized to perform an…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to access any order's secret order_key and full billing and shipping PII — including first name, last name, email address, phone number, street address, postcode, city, region, and country — emitted inline as the klarna_payments_params JavaScript variable, enabling full store-wide order enumeration. Because WooCommerce order IDs are sequential integers and no order_key or authenticated session is required, every order in the store can be trivially enumerated with sequential GET requests to the order-pay endpoint.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110590","failure_patterns":"SEA-FM-003","capabilities":"auth.financial_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110590","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110590"}
{"incident_id":"SEA-CVE-2026-110645","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject shell metacharacters to run commands with the Node.js process privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110645","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-110645","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110645"}
{"incident_id":"SEA-CVE-2026-110650","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generatethumbnail() that allows attackers to execute commands by supplying shell metacharacters in file paths.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that allows attackers to execute commands by supplying shell metacharacters in file paths. Attackers who control a file name passed to generate_thumbnail, such as an uploaded file, can inject commands into os.system() calls running ffmpeg, convert or unoconv with the Python process privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110650","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-110650","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110650"}
{"incident_id":"SEA-CVE-2026-110670","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110670","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-110670","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110670"}
{"incident_id":"SEA-CVE-2026-110718","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes. Attackers can reference loopback, private, or cloud metadata addresses that bypass the loose isValidUrl() check, and read responses embedded in the generated DOCX word/media folder.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110718","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-110718","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110718"}
{"incident_id":"SEA-CVE-2026-110721","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered…","organization":"The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered with permissioncallback => 'returntrue', and the handler at PopupNotification project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/popup-submit REST route is registered with permission_callback => '__return_true', and the handler at PopupNotification::handle_popup_submission() accepts an attacker-controlled nx_id, loads whichever NotificationX campaign that id points to, and copies that campaign's own source into the new entry without verifying that the campaign is a Popup Notification or Exit Intent Popup (the two sources this form is intended to serve). This makes it possible for unauthenticated attackers to inject forged social-proof entries (name, title, message, email, theme) into any enabled non-popup NotificationX campaign — WP Comments, WooCommerce/EDD/Give sales, reviews, etc.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110721","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110721","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110721"}
{"incident_id":"SEA-CVE-2026-110804","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a checkout update request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110804","failure_patterns":"","capabilities":"auth.financial_action;auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-110804","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110804"}
{"incident_id":"SEA-CVE-2026-110805","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110805","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-110805","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110805"}
{"incident_id":"SEA-CVE-2026-110806","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110806","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-110806","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110806"}
{"incident_id":"SEA-CVE-2026-110807","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/iostruct.py of the component generate Endpoint.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110807","failure_patterns":"SEA-FM-006","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-110807","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110807"}
{"incident_id":"SEA-CVE-2026-110809","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110809","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-110809","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110809"}
{"incident_id":"SEA-CVE-2026-110812","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in auto-update should upgrade to Amazon Neptune engine version 1.5.0.0.(Backports to 1.4.8.1 and 1.4.7.1)","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110812","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-110812","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110812"}
{"incident_id":"SEA-CVE-2026-110829","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110829","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-110829","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110829"}
{"incident_id":"SEA-CVE-2026-110832","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wtsreaddrdynvcdatafirst that allows authenticated clients to force servers to commit large memory allocations.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memory allocations. Attackers can send a seven-byte DATA_FIRST message on an opened DVC declaring a large 32-bit length, causing zeroed resident memory growth and server resource exhaustion.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110832","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-110832","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110832"}
{"incident_id":"SEA-CVE-2026-110833","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers can send a FIRST fragment followed by continuation fragments without LAST, growing per-session heap streams proportional to traffic and exhausting proxy memory.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110833","failure_patterns":"","capabilities":"arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-110833","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110833"}
{"incident_id":"SEA-CVE-2026-110838","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard input. Attackers can negotiate TLS-only RDP and send an input PDU without Confirm Active to inject synthetic keystrokes into the host user's X11 session via XTEST.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110838","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-110838","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110838"}
{"incident_id":"SEA-CVE-2026-110840","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly into SQL text without parameterisation. When a workflow binds untrusted input such as webhook fields to the Query field, unauthenticated external callers can execute arbitrary SQL against the connected database with the stored credential's privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110840","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-110840","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110840"}
{"incident_id":"SEA-CVE-2026-110841","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the suspended checkpoint belongs to the caller. Authenticated project members can list and read other members' private agent conversations through project-scoped endpoints, then approve their pending tool calls, causing the tools to execute and write results into the victim's conversation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110841","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110841","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110841"}
{"incident_id":"SEA-CVE-2026-110842","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited…","organization":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member holding only a workflow project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the main process, reads inherited properties, and permits assignment onto shared prototypes. An authenticated member holding only a workflow:read grant can replace a built-in method with one returning a truthy value so server-side permission checks accept unheld scopes, enabling takeover of owner accounts not protected by MFA.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110842","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"auth.code_execution;auth.privileged_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-110842","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110842"}
{"incident_id":"SEA-CVE-2026-110845","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local git configuration before invoking an external program. Authenticated members who can point the node, including as an agent tool, at a repository whose local configuration they control can execute programs as the n8n process user.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110845","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-110845","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110845"}
{"incident_id":"SEA-CVE-2026-110846","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, running downstream actions under the workflow owner's credentials, potentially including command execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110846","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-110846","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110846"}
{"incident_id":"SEA-CVE-2026-110848","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using node names as object members without checking for reserved keys. Authenticated users can create nodes named __proto__ through the API and invoke the connect-nodes operation to pollute the global object prototype, disrupting the instance until restart.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110848","failure_patterns":"SEA-FM-002","capabilities":"auth.infrastructure_modification;data.pii","is_ai_system":true,"is_agentic":false,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-110848","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110848"}
{"incident_id":"SEA-CVE-2026-110849","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin blob URL. A member who uploads a crafted item can run script in the n8n origin of whoever previews it, typically the owner, and act with their session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110849","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-110849","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110849"}
{"incident_id":"SEA-CVE-2026-110850","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only a node's credentials field. An editor can configure a Message an Agent node in inline mode with tools they control to resolve the owner's credentials and send decrypted secrets to an attacker-chosen destination.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110850","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-110850","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110850"}
{"incident_id":"SEA-CVE-2026-110851","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against the requested project, and updates an existing Agent without verifying which project owns it. An authenticated user with read-only Agent access to another project can supply an existing Agent ID to move that Agent into their own project and rewrite its name, schema and version.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110851","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"auth.write_action;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110851","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110851"}
{"incident_id":"SEA-CVE-2026-110852","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit this identifier in requests to webhook, form, or MCP routes to execute workflows in unrelated projects under those projects' credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110852","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"data.credentials_secrets;arch.external_api;arch.event_driven;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110852","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110852"}
{"incident_id":"SEA-CVE-2026-110854","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit. A client holding only the public application keys can sign up, request a verification email, or request a password reset while the mail provider rejects, rate limits, or is unavailable, crashing the server.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110854","failure_patterns":"SEA-FM-012","capabilities":"auth.public_publication;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-110854","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110854"}
{"incident_id":"SEA-CVE-2026-110856","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the reactorepoch pattern used by parseactoranddate on author, committer, and tagger lines.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger lines. Attackers can serve repositories with commit or tag objects containing long space-filled lines lacking a valid epoch or timezone, causing quadratic backtracking and CPU exhaustion.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110856","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-110856","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110856"}
{"incident_id":"SEA-CVE-2026-110861","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where the limit check is not atomic with the counter update. Remote attackers can send bursts of concurrent requests that pass the check together, exceeding configured limits on password sign-in, two-factor verification, one-time code, password reset, and other rate-limited endpoints.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110861","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-110861","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110861"}
{"incident_id":"SEA-CVE-2026-110862","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state to Magic Link verification, gaining sessions or creating falsely email-verified accounts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110862","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110862","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110862"}
{"incident_id":"SEA-CVE-2026-110863","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider. Attackers can copy a legitimate provider's OIDC issuer or SAML entity ID and assert a victim's subject or NameID, because account lookup ignores providerId, creating sessions for victim accounts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110863","failure_patterns":"SEA-FM-003","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110863","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110863"}
{"incident_id":"SEA-CVE-2026-110864","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other users by forging encrypted profiles. When the proxy shares the global secret and cookie-stored state is used, attackers can obtain encrypted state for a fake profile with a victim's verified email to take over the account via implicit linking.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110864","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110864","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110864"}
{"incident_id":"SEA-CVE-2026-110868","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources. Attackers can point a preset at an instance metadata service endpoint to obtain AWS credentials or leak sensitive information through Renovate logs.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110868","failure_patterns":"SEA-FM-002","capabilities":"auth.infrastructure_modification;data.pii;data.credentials_secrets;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-110868","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110868"}
{"incident_id":"SEA-CVE-2026-110869","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection.actionEHLO, whose four AUTH mechanism detection regexes contain overlapping whitespace sub-patterns that backtrack…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUTH mechanism detection regexes contain overlapping whitespace sub-patterns that backtrack quadratically. A malicious or man-in-the-middle SMTP server can reply to EHLO with 250-AUTH, a long whitespace run and a non-matching token, blocking the Node.js event loop for tens of seconds to hours before authentication.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110869","failure_patterns":"SEA-FM-006","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-110869","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110869"}
{"incident_id":"SEA-CVE-2026-110871","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding. Attackers can supply large recipient lists or long headers that fold into tens of thousands of continuation lines, blocking the Node.js event loop during DKIM signing.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110871","failure_patterns":"SEA-FM-006","capabilities":"data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-110871","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110871"}
{"incident_id":"SEA-CVE-2026-110872","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection.onData and isPartialResponse.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection._onData and isPartialResponse. A malicious SMTP server or on-path attacker can stream continuation lines without a completion line before authentication, blocking the Node.js event loop and exhausting memory.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110872","failure_patterns":"SEA-FM-006","capabilities":"arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-110872","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110872"}
{"incident_id":"SEA-CVE-2026-110904","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110904","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110904","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110904"}
{"incident_id":"SEA-CVE-2026-110908","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.21 and source revision 2.1.21 contain an OS command injection vulnerability in the FRR status filter.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression into which escapeshellarg() output is concatenated. Shell command substitution is then evaluated by a popen() pipeline, allowing attacker-selected commands to execute as root. There are updated FRR packages for pfSense Plus 26.07/26.03.1 and CE 2.9.0/2.8.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110908","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-110908","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110908"}
{"incident_id":"SEA-CVE-2026-110911","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property,…","organization":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey and findOrCreateBy...), and validatesUniquenessOf. The parser incorrectly treats a doubled single quote as the end of a literal. Applications passing request data to these APIs can expose authentication, password-reset or token lookups, and data to unauthorized access; numeric-column values are not affected. There is a similar concern for query-builder whereBetween() in 4.0.0 through 4.1.1 project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey and findOrCreateBy...), and validatesUniquenessOf. The parser incorrectly treats a doubled single quote as the end of a literal. Applications passing request data to these APIs can expose authentication, password-reset or token lookups, and data to unauthorized access; numeric-column values are not affected. There is a similar concern for query-builder whereBetween() in 4.0.0 through 4.1.1: string/date bounds can alter SQL on MySQL/MariaDB with backslash escaping enabled. This is fixed in 4.1.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110911","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-110911","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-110911"}
{"incident_id":"SEA-CVE-2026-111091","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111091","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-111091","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111091"}
{"incident_id":"SEA-CVE-2026-111106","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient…","organization":"The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL query in SegmentFilterService project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL query in SegmentFilterService::get_meta_join_query() at line 797, where the value is string-interpolated into the WHERE fragment in a numeric (unquoted) context and the surrounding $wpdb->prepare() calls do not cover the injected value. This makes it possible for authenticated attackers, with the custom 'mint_read_contacts' capability (granted to Administrators by default, and configurable to lower roles via the plugin's role manager), to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111106","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-111106","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111106"}
{"incident_id":"SEA-CVE-2026-111114","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the…","organization":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the /?reset-view handler in roleswitchertoviewadminas() performs no nonce or capability check when the supplied username matches the authenticated caller, and because the plugin's only cleanup mechanism — the profileupdate hook — does not fire when WordPress performs a bulk role change via wp-admin/users.php?action=promote, which calls WPUser project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 The vulnerability exists because the /?reset-view handler in role_switcher_to_view_admin_as() performs no nonce or capability check when the supplied username matches the authenticated caller, and because the plugin's only cleanup mechanism — the profile_update hook — does not fire when WordPress performs a bulk role change via wp-admin/users.php?action=promote, which calls WP_User::set_role() directly and leaves a stale administrator value in the nxtext_view_admin_original_role user meta. This makes it possible for authenticated attackers with Subscriber-level access or above to restore the stale stored Administrator role to their own account, effectively escalating their privileges to Administrator. Exploitation requires that the attacker's account previously held the Administrator role and used the View Admin Role Switcher feature before being demoted specifically through the bulk role-change control rather than the Edit User screen, as only the bulk path bypasses the profile_update hook that would otherwise have cleared the stored original role.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111114","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-111114","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111114"}
{"incident_id":"SEA-CVE-2026-111178","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Exploitation requires the targeted calendar to have more than 200 bookings, as the orderby value is only forwarded to the database layer when the AJAX handler takes the use_ajax branch; an Administrator can satisfy this condition by creating bookings directly.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111178","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-111178","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111178"}
{"incident_id":"SEA-CVE-2026-111215","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent interface name. Attackers with limited Wireless Edit or Interface Assignments privileges can submit values like ath0;<cmd> via interfaces_wireless_edit.php or interfaces_assign.php, which interface_wireless_clone() interpolates unescaped into an ifconfig shell command.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111215","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-111215","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111215"}
{"incident_id":"SEA-CVE-2026-111219","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in servicespppoeedit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entries via unvalidated username POST fields. Attackers with the PPPoE Server Edit privilege can add a line whose secret begins with '!', making mpd5 run commands as root when a PPPoE client authenticates.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111219","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-111219","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111219"}
{"incident_id":"SEA-CVE-2026-111220","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfacespppsedit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields.","organization":"pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfacespppsedit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injecting newlines into the ptpid or reset hour/minute fields. Attackers holding the 'WebCfg - Interfaces: PPPs: Edit' privilege can submit crafted POST values that configure_cron() writes unescaped into /etc/crontab, running arbitrary root commands on schedule.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111220","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111220","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111220"}
{"incident_id":"SEA-CVE-2026-111221","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS shared secret.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS shared secret. Attackers with L2TP or PPPoE Server edit privileges can POST a secret containing a quote and newline to vpn_l2tp.php or services_pppoe_edit.php, appending an up-script that executes as root when a session starts.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111221","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-111221","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111221"}
{"incident_id":"SEA-CVE-2026-111222","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unvalidated timezone value. Attackers can embed a quote and newline to add auto_prepend_file pointing at /var/db/zoneinfo, executing PHP as root after php.ini is regenerated at boot or php-fpm restart.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111222","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111222","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111222"}
{"incident_id":"SEA-CVE-2026-111227","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in servicesunboundacls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration…","organization":"Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in servicesunboundacls.php that allows authenticated users with the DNS Resolver project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lists privilege to inject Unbound configuration directives. Attackers can embed CR/LF characters in the aclname or aclaction fields written to access_lists.conf to add local-data, local-zone, or forward-zone directives and control DNS answers served to LAN clients.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111227","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-111227","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111227"}
{"incident_id":"SEA-CVE-2026-111228","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in servicesunboundadvanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives.","organization":"Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in servicesunboundadvanced.php that allows authenticated users with DNS Resolver project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver: Advanced privilege to inject Unbound directives. Attackers can embed CR/LF characters in the unvalidated sock_queue_timeout parameter, which is written raw into unbound.conf, to override local records and forwarding for all clients.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111228","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-111228","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111228"}
{"incident_id":"SEA-CVE-2026-111229","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in servicescaptiveportalhasync.php that allows users with only the Captive Portal HA privilege to execute commands as root.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privilege to execute commands as root. Attackers can set backwardsyncip to a malicious XMLRPC server returning connected_users with shell metacharacters in ip or mac fields, which captiveportal_load_pfctl passes unescaped to a pfctl shell command.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111229","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-111229","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111229"}
{"incident_id":"SEA-CVE-2026-111230","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in servicesdyndnsedit.php.","organization":"Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services_dyndns_edit.php. Attackers can set a non-matching Result Match string so _checkStatus() logs file contents such as /conf/config.xml or /etc/master.passwd to the system log.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111230","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111230","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111230"}
{"incident_id":"SEA-CVE-2026-111231","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because configrestore() and configinstall() ignore the 'User - Config: Deny Config…","organization":"Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because configrestore() and configinstall() ignore the 'User - Config project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and config_install() ignore the 'User - Config: Deny Config Write' privilege. Attackers holding page privileges for services_acb.php, uploadconfig.php, diag_confbak.php, or diag_backup.php can install a chosen config.xml to gain root-level code execution after reload or reboot.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111231","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-111231","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111231"}
{"incident_id":"SEA-CVE-2026-111235","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no terminal deny rule. A request that uses a non-canonical (for example lowercase) method token matches no rule and is processed without authentication. A remote, unauthenticated attacker can read the monitored inventory and can create, modify, or delete resources through the REST API, which includes injecting events to fabricate or suppress alarms. The /rest/alarms chain has the same missing deny rule and discloses whether an alarm exists through a difference in the response. The fix adds a terminal deny rule to each REST filter chain. The solution is to upgrade to Meridian 2024.3.14, 2025.0.11, 2026.0.1 and Horizon 36.0.5 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111235","failure_patterns":"SEA-FM-003","capabilities":"auth.code_execution;auth.destructive_action;auth.write_action;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111235","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111235"}
{"incident_id":"SEA-CVE-2026-111237","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.getmodelmeta.custommetadatamap of the file ultralytics/nn/autobackend.py of the…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.get_modelmeta.custom_metadata_map of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. This manipulation of the argument imgsz/names/kpt_shape causes improper neutralization of directives in dynamically evaluated code. The attack requires local access. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111237","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111237","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111237"}
{"incident_id":"SEA-CVE-2026-111252","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a DOCTYPE that declares internal entities can expand to a very large value and exhaust the server memory. An authenticated user with provisioning access can supply such a document through a requisition or foreign-source import, which includes a remote requisition URL that the server fetches and parses. Both deeply nested entities and a single large entity referenced many times cause the memory exhaustion. The fix caps the number of entity expansions for all XML parsing and rejects any DOCTYPE in requisition and foreign-source XML. The solution is to upgrade to Meridian 2024.3.14, 2025.0.11, 2026.0.1 and Horizon 36.0.5 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111252","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-111252","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111252"}
{"incident_id":"SEA-CVE-2026-111283","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrator with any password when SAML single sign-on is configured. Attackers can submit the administrator username with an arbitrary password on the web login page to obtain a SuperAdmin session, modify device credentials, run device commands, and alter audit records.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111283","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111283","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111283"}
{"incident_id":"SEA-CVE-2026-111284","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString. Attackers permitted to create Public Holidays or Mandatory Days can store JavaScript payloads that execute when HR managers or administrators open the Holiday modal, hijacking their sessions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111284","failure_patterns":"","capabilities":"auth.write_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111284","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111284"}
{"incident_id":"SEA-CVE-2026-111311","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including,…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension allow-list in extension_is_allowed() that returns true when wp_check_filetype() yields an empty type for unrecognized extensions such as .php, combined with magic-byte-only MIME detection and no capability check beyond is_user_logged_in(). This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. Exploitation requires the Helpdesk module to be enabled, as the vulnerable REST endpoint is only registered when that module is active.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111311","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"data.uploaded_files;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-111311","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111311"}
{"incident_id":"SEA-CVE-2026-111312","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id without session or authorId checks. Unauthenticated attackers who know a HealthData record id can read another user's medical record data and file metadata, overwrite it with arbitrary JSON, or delete it.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111312","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111312","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111312"}
{"incident_id":"SEA-CVE-2026-111313","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destinations. Attackers can supply loopback, private, or cloud metadata addresses in the url field to read returned page content, disclosing instance metadata and internal service data.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111313","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-111313","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111313"}
{"incident_id":"SEA-CVE-2026-111320","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider baseurl.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST /api/v1/models/check to reach internal or metadata addresses, read error responses, and capture stored provider API keys.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111320","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-111320","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111320"}
{"incident_id":"SEA-CVE-2026-111321","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login can create an action pointing to loopback, internal or cloud metadata addresses and run it via POST /actions/{action_id}/run to read back up to 64 KiB of responses.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111321","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-111321","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111321"}
{"incident_id":"SEA-CVE-2026-111322","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/ control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to execute commands on the host as the Archon user.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111322","failure_patterns":"SEA-FM-010","capabilities":"auth.code_execution;auth.external_communication;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111322","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111322"}
{"incident_id":"SEA-CVE-2026-111323","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validateurl checks only the initial hostname.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata services, receiving fetched content through the model-generated summary.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111323","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"auth.public_publication;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-111323","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111323"}
{"incident_id":"SEA-CVE-2026-111324","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid without uuid verification, then log in presenting that uuid to rebind the peer to their account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111324","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111324","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111324"}
{"incident_id":"SEA-CVE-2026-111329","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deletion since CheckLogin recreates it, to control tenant applications and app secrets.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111329","failure_patterns":"SEA-FM-012","capabilities":"auth.destructive_action;auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-111329","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111329"}
{"incident_id":"SEA-CVE-2026-111332","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers holding an existing oxi_shares share-ring cookie can request content via GET /api/files/{id} to read shared files or folder contents despite the new password.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111332","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-111332","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111332"}
{"incident_id":"SEA-CVE-2026-111344","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/{nodeId}/description, which skips space membership and node permission checks, to disclose cross-tenant datasheet, folder, and form descriptions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111344","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111344","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111344"}
{"incident_id":"SEA-CVE-2026-111345","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id.","organization":"Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attackers can request GET /api/v1/messages/conversation/ project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attackers can request GET /api/v1/messages/conversation/:id, which lacks participant checks, to obtain full message history plus participants' usernames, full names and email addresses.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111345","failure_patterns":"SEA-FM-003","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111345","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111345"}
{"incident_id":"SEA-CVE-2026-111349","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL.","organization":"Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API and GraphQL. Attackers can send anonymous requests to POST /api/json/customers or the create_customer mutation to insert attacker-chosen names, contact details and addresses into the operator's CRM.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111349","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111349","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111349"}
{"incident_id":"SEA-CVE-2026-111350","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111350","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111350","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111350"}
{"incident_id":"SEA-CVE-2026-111352","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open…","organization":"ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers with a valid admin-type API token can list member emails and mobile numbers, disable members, and call PUT admin/roles/{id}/authorize to grant themselves full administrator rights.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111352","failure_patterns":"","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111352","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111352"}
{"incident_id":"SEA-CVE-2026-111353","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body.","organization":"Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or /api/v1/storage/ticket/ project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or /api/v1/storage/ticket/:id/upload/single to attach files and time records to any ticket under another user's identity.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111353","failure_patterns":"SEA-FM-003","capabilities":"data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111353","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111353"}
{"incident_id":"SEA-CVE-2026-111354","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"crmebjava through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers can request /api/front/order/express/{orderId} or /api/front/order/apply/refund/{orderId} to view victims' tracking numbers, logistics traces, payment amounts and product lines.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111354","failure_patterns":"SEA-FM-003","capabilities":"auth.financial_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111354","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111354"}
{"incident_id":"SEA-CVE-2026-111363","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary file_id values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/file_bbox to retrieve extracted page text from other users' and tenants' knowledge bases.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111363","failure_patterns":"","capabilities":"auth.privileged_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111363","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111363"}
{"incident_id":"SEA-CVE-2026-111367","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribe_new, or /api/subscribe/confirm to deactivate any contact or force confirmed subscriptions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111367","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111367","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111367"}
{"incident_id":"SEA-CVE-2026-111399","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111399","failure_patterns":"SEA-FM-002","capabilities":"arch.content_ingestion_rag","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-111399","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111399"}
{"incident_id":"SEA-CVE-2026-111444","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NOBACKSLASHESCAPES absent) when an application supplies request data to inline-literal paths.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings that the parser does not bind, such as BETWEEN bounds, function arguments and LIKE ESCAPE literals. Doubling single quotes without accounting for backslash escapes allows a value to alter the query. Bound paths are not affected; whereBetween() is bound from 4.1.2. This is fixed in 4.2.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111444","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-111444","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111444"}
{"incident_id":"SEA-CVE-2026-111445","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=).","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error information disabled returns true for an out-of-scope key instead of throwing. Applications relying on scopes for ownership or tenant authorization can therefore load and subsequently modify or delete another user's or tenant's record when the key comes from a request. The 4.2.0 fix combines key conditions with incoming scope, query-builder or where conditions in findByKey(), exists(key=), updateByKey() and deleteByKey(). Other scope-aware finders, aggregates, updateAll() and deleteAll() are not affected.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111445","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111445","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111445"}
{"incident_id":"SEA-CVE-2026-111450","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers a cold start can direct later error emails to an address under their control for that application's lifetime. Emails disclose error and request metadata; on engines/versions where scope dumps render, they may also disclose configuration secrets and other users' session/cookie data. On the Lucee 7 engine, scope dumps fail to render, limiting disclosure to header fields. This is fixed in 4.1.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111450","failure_patterns":"SEA-FM-012","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-111450","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111450"}
{"incident_id":"SEA-CVE-2026-111451","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete unintended files; package extraction can overwrite other vendor files; generator names can write outside the project or inject executable CFML into generated code. Inputs may originate from CI variables, branch names, packages or an AI agent using the CLI's MCP tools. Also relevant are unencoded display properties in generated scaffold show views since 4.1.0 and in generated admin views, permitting stored XSS, and stale process-ID handling in RustCFML server commands that can terminate an unrelated process. This is fixed in 4.1.2; existing affected generated views also require the documented edit.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111451","failure_patterns":"SEA-FM-010","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111451","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111451"}
{"incident_id":"SEA-CVE-2026-111458","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints.","organization":"The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string \"fan1 project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string \"fan1:x509:server:passive:%s:sha256:%s\" contains 33 fixed characters in addition to the two variable-length fields and a null terminator, requiring strlen(b64) + strlen(hex) + 34 bytes. This miscalculation results in a 3-byte heap-based buffer overflow on every invocation of the function with valid inputs. The overflow occurs because sprintf writes the full formatted string into the undersized heap buffer without bounds checking. An attacker who can supply a crafted pcap file containing a TLS X.509 certificate to a user running ssldump with FAN/1 fingerprinting enabled (for example with the -j -N options) can trigger the overflow. The resulting heap corruption may lead to denial of service through a crash or, in a worst-case scenario, arbitrary code execution in the context of the user running ssldump. The vulnerability is deterministic and requires no special privileges beyond the ability to provide input to the tool.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111458","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-111458","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111458"}
{"incident_id":"SEA-CVE-2026-111472","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111472","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-111472","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111472"}
{"incident_id":"SEA-CVE-2026-111612","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/randomAuth endpoint in ParserApi. Attackers can repeatedly call the endpoint and decrypt the encryptedAuth blob using the hard-coded AES key nfd_auth_key2026 to recover other users' cloud-drive cookies, tokens, or passwords.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111612","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-111612","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111612"}
{"incident_id":"SEA-CVE-2026-111622","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter. Attackers can send crafted /login links to users with active SSO sessions, then redeem stolen codes at /oauth2/access_token with any valid client credentials to obtain victims' access tokens.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111622","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-111622","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111622"}
{"incident_id":"SEA-CVE-2026-111632","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign companyid.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a foreign company_id. Attackers can submit create or update requests to plugin REST API endpoints such as partners, sales, or inventories to break multi-company data segregation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111632","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111632","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111632"}
{"incident_id":"SEA-CVE-2026-111637","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}. Attackers can request transaction field classes like ns.entity-transaction with sequential ids to retrieve names, values, account ids, and descriptions without nexopos.read.transactions permission.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111637","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-111637","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111637"}
{"incident_id":"SEA-CVE-2026-111642","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Attackers can register via the unauthenticated /api/v1/system/user/register endpoint, log in, and forge an HS256 token keeping their session_id but naming the superuser in user_name to gain superuser privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111642","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-111642","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111642"}
{"incident_id":"SEA-CVE-2026-111662","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint. Attackers can target loopback, private, or cloud-metadata addresses through FetchLinkCardService, which follows redirects and skips TLS verification, to read internal page titles and descriptions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111662","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-111662","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111662"}
{"incident_id":"SEA-CVE-2026-111673","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/ is excluded from the Shiro jwt filter.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/ is excluded from the Shiro jwt filter. Attackers can send PUT requests to /User/updateUser to set a new password and role on any userId, including administrators, enabling full account takeover.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111673","failure_patterns":"SEA-FM-012","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-111673","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111673"}
{"incident_id":"SEA-CVE-2026-111682","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config REST API. Attackers with any ROLE_USER account can query /api/model-config/page or /api/model-config/{id} to retrieve unmasked keys, enabling provider account access and incurred costs.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111682","failure_patterns":"SEA-FM-003","capabilities":"data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111682","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111682"}
{"incident_id":"SEA-CVE-2026-111687","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feedid} endpoint.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{feed_id} endpoint. Attackers can supply a non-built-in ext value and a {{=expression}} template whose object-subclass traversal bypasses the eval denylist to run OS commands as the service account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111687","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.public_publication;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-111687","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111687"}
{"incident_id":"SEA-CVE-2026-111692","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC secret in JwtTokenService. Attackers can sign a payload of admin and a future expiry with the default dev-secret to gain full administrative access to protected /webapi routes, including the Doris SQL query API.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111692","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.credentials_secrets;arch.caching","is_ai_system":true,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111692","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111692"}
{"incident_id":"SEA-CVE-2026-111698","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wallet balance without payment. Attackers can send requests with arbitrary amount and userId parameters to credit or reduce balances and consume charging services for free.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111698","failure_patterns":"SEA-FM-003","capabilities":"auth.financial_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111698","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111698"}
{"incident_id":"SEA-CVE-2026-111708","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/signup. Attackers can omit the profile field or set it to admin, gaining user management, settings, and access to all tickets, contacts, messages, and WhatsApp connections.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111708","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-111708","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111708"}
{"incident_id":"SEA-CVE-2026-111718","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the orderby and groupby fields of the /api/data/invoke endpoint.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the order_by and group_by fields of the /api/data/invoke endpoint. Attackers can supply subqueries or EXTRACTVALUE and UPDATEXML functions that bypass the SqlGuard denylist and row-level security, reading other users' rows and tables.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111718","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii;data.cross_tenant_data;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-111718","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-111718"}
{"incident_id":"SEA-CVE-2026-11318","evidence_tier":"security_advisory","title":"Software component issue could grant elevated privileges","summary":"Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the privileged installer method to run an attacker-supplied installer, achieving full root compromise of the macOS host.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11318","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-11318","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-11318"}
{"incident_id":"SEA-CVE-2026-11730","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11730","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-11730","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-11730"}
{"incident_id":"SEA-CVE-2026-11731","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11731","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-11731","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-11731"}
{"incident_id":"SEA-CVE-2026-11936","evidence_tier":"security_advisory","title":"security verify access issue could run attacker-controlled scripts in a browser","summary":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting.","organization":"security verify access project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11936","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-11936","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-11936"}
{"incident_id":"SEA-CVE-2026-12091","evidence_tier":"security_advisory","title":"security verify access issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"security verify access project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote attacker could send a specially crafted request that causes a limited out‑of‑bounds memory read.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12091","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-12091","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-12091"}
{"incident_id":"SEA-CVE-2026-12260","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attackers to extract confidential information (such as the version and type of backend used), alter data or further compromise the CRM environment.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12260","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-12260","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-12260"}
{"incident_id":"SEA-CVE-2026-12272","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 This is due to the W3TCDYNAMICSECURITY…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 This is due to the W3TC_DYNAMIC_SECURITY constant being hardcoded to a publicly known value. This makes it possible for unauthenticated attackers to know the W3 Total Cache mfunc security key, which when W3 Total Cache is installed may allow arbitrary PHP code injection.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12272","failure_patterns":"","capabilities":"arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-12272","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-12272"}
{"incident_id":"SEA-CVE-2026-12626","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possible for authenticated attackers, with custom-level access and above, to inject a PHP Object. No known gadget chain is available.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12626","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-12626","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-12626"}
{"incident_id":"SEA-CVE-2026-12656","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to its normal state.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12656","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-12656","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-12656"}
{"incident_id":"SEA-CVE-2026-12859","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs.","organization":"Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12859","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-12859","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-12859"}
{"incident_id":"SEA-CVE-2026-13258","evidence_tier":"security_advisory","title":"datapower gateway issue could run attacker-controlled scripts in a browser","summary":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13258","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-13258","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-13258"}
{"incident_id":"SEA-CVE-2026-14496","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14496","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-14496","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-14496"}
{"incident_id":"SEA-CVE-2026-14507","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14507","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-14507","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-14507"}
{"incident_id":"SEA-CVE-2026-14509","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to algorithmic complexity in linked-list traversal.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14509","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-14509","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-14509"}
{"incident_id":"SEA-CVE-2026-14521","evidence_tier":"security_advisory","title":"datapower gateway issue could reach internal services","summary":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF).","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14521","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-14521","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-14521"}
{"incident_id":"SEA-CVE-2026-14851","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names,…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised individuals. The issue is caused by a lack of authorisation checks at the endpoint responsible for serving PDF invoice files. Furthermore, some URLs for invoicing documents appear to be publicly accessible via search engines, exposing paths to confidential files. Successful exploitation of this vulnerability could allow an attacker to access data to which they should not have access, as well as to predict identifiers in order to access even more confidential information.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14851","failure_patterns":"","capabilities":"auth.financial_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-14851","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-14851"}
{"incident_id":"SEA-CVE-2026-14854","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14854","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-14854","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-14854"}
{"incident_id":"SEA-CVE-2026-14990","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14990","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-14990","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-14990"}
{"incident_id":"SEA-CVE-2026-15090","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'linkurl' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15090","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-15090","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-15090"}
{"incident_id":"SEA-CVE-2026-15178","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access and above, to read private form submissions, change submission statuses, permanently delete submissions, and modify global plugin settings.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15178","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-15178","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-15178"}
{"incident_id":"SEA-CVE-2026-15222","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to arbitrary shortcode…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.2.8. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15222","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-15222","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-15222"}
{"incident_id":"SEA-CVE-2026-15819","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15819","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-15819","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-15819"}
{"incident_id":"SEA-CVE-2026-15822","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper memoization of GraphQL fragment spreads.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15822","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-15822","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-15822"}
{"incident_id":"SEA-CVE-2026-15824","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15824","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-15824","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-15824"}
{"incident_id":"SEA-CVE-2026-16111","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a type confusion flaw.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16111","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16111","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16111"}
{"incident_id":"SEA-CVE-2026-16159","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16159","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16159","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16159"}
{"incident_id":"SEA-CVE-2026-16161","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16161","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16161","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16161"}
{"incident_id":"SEA-CVE-2026-16164","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16164","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16164","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16164"}
{"incident_id":"SEA-CVE-2026-16165","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16165","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16165","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16165"}
{"incident_id":"SEA-CVE-2026-16167","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper bounds checking.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16167","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16167","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16167"}
{"incident_id":"SEA-CVE-2026-16169","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16169","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16169","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16169"}
{"incident_id":"SEA-CVE-2026-16176","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16176","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16176","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16176"}
{"incident_id":"SEA-CVE-2026-16178","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper input validation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16178","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16178","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16178"}
{"incident_id":"SEA-CVE-2026-16182","evidence_tier":"security_advisory","title":"datapower gateway issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datapower gateway project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16182","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16182","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16182"}
{"incident_id":"SEA-CVE-2026-16301","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without authorization due to improper authorization checks in the downstream pipeline creation service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16301","failure_patterns":"SEA-FM-003","capabilities":"auth.code_execution;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-16301","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16301"}
{"incident_id":"SEA-CVE-2026-16436","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows a remote attacker to unlock the system by obtaining the challenge response by some means. The challenge response used to unlock the system is common to all users and fixed. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16436","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16436","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16436"}
{"incident_id":"SEA-CVE-2026-16437","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, MC Works64 all versions, GENESIS32 all versions, BizViz all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, IoTWorX 10.97.3 and prior, GENESIS32 all versions, and BizViz all versions allows an authenticated local user with administrative privileges to unlock the system by tampering with the management file that stores the challenge response. Administrators are able to read and write the management file. But the management file is protected by Windows. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16437","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16437","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16437"}
{"incident_id":"SEA-CVE-2026-16438","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, and MobileHMI 10.97.3 and prior allows an attacker who can log in using the same administrator account for the affected products to launch and operate DCOM objects locally or remotely. During installation, the installers of the affected products unnecessarily grant default DCOM permissions to the administrator account of the affected products. Users with that administrator accounts can locally or remotely launch and operate DCOM objects that should require UAC elevation. As a result, the attacker may disclose, tamper with, destroy, or delete internal information, or cause the affected system to enter a denial-of-service (DoS) condition.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16438","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-16438","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16438"}
{"incident_id":"SEA-CVE-2026-16830","evidence_tier":"security_advisory","title":"security verify access issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"security verify access project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16830","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-16830","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-16830"}
{"incident_id":"SEA-CVE-2026-17031","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary Media Library attachments.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17031","failure_patterns":"SEA-FM-003","capabilities":"auth.financial_action;auth.destructive_action;auth.write_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-17031","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-17031"}
{"incident_id":"SEA-CVE-2026-17189","evidence_tier":"security_advisory","title":"security verify access issue could run attacker-controlled scripts in a browser","summary":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting.","organization":"security verify access project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17189","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-17189","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-17189"}
{"incident_id":"SEA-CVE-2026-17196","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function.","organization":"The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function. This is due to missing file type validation in the uploadfiles function, which reads and applies an attacker-controlled extensions string from superelements post meta verbatim as the allowed MIME type map. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The attack requires a preceding step project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the upload_files function. This is due to missing file type validation in the upload_files function, which reads and applies an attacker-controlled extensions string from _super_elements post meta verbatim as the allowed MIME type map. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The attack requires a preceding step: poisoning the _super_elements post meta via the super_save_form AJAX handler, which lacks a capability and nonce check but requires the attacker to be authenticated as at minimum a Subscriber-level user; the subsequent file upload via super_upload_files requires no authentication at all.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17196","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-17196","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-17196"}
{"incident_id":"SEA-CVE-2026-17484","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17484","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-17484","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-17484"}
{"incident_id":"SEA-CVE-2026-18166","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive information due to improper authorization when using the CREATE WRAPPER command.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18166","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-18166","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-18166"}
{"incident_id":"SEA-CVE-2026-18541","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18541","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-18541","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-18541"}
{"incident_id":"SEA-CVE-2026-19498","evidence_tier":"security_advisory","title":"security verify access issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"security verify access project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19498","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-19498","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-19498"}
{"incident_id":"SEA-CVE-2026-19541","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an…","organization":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an authenticated user with permission to manage outgoing OAuth connections to obtain the secret via pointing the token URL at an attacker-controlled endpoint and triggering validation.. Mattermost Advisory ID project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an authenticated user with permission to manage outgoing OAuth connections to obtain the secret via pointing the token URL at an attacker-controlled endpoint and triggering validation.. Mattermost Advisory ID: MMSA-2026-00761","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19541","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-19541","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-19541"}
{"incident_id":"SEA-CVE-2026-19570","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The LE Audio Broadcast Sink in subsys/bluetooth/audio/bapbroadcastsink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure…","organization":"The LE Audio Broadcast Sink in subsys/bluetooth/audio/bapbroadcastsink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure modsrcparam without any bounds check. In basesubgroupmetacb() the destination element was selected as modsrcparam.subgroups[modsrcparam.numsubgroups] with no test against ARRAYSIZE(modsrcparam.subgroups) (sized by CONFIGBTBAPBASSMAXSUBGROUPS, default 1), and the metadata was copied with memcpy() using the raw on-air length returned by btbapbasegetsubgroupcodecmeta() into a metadata array sized by CONFIGBTAUDIOCODECCFGMAXMETADATASIZE (default 4). The BASE validator btbapbasegetbasefromad() only checks structural consistency and permits up to ~24 subgroups and metadata LTVs of ~240 octets. The defect is reached from the periodic advertising receive callback project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio Scan Service parameter structure mod_src_param without any bounds check. In base_subgroup_meta_cb() the destination element was selected as mod_src_param.subgroups[mod_src_param.num_subgroups] with no test against ARRAY_SIZE(mod_src_param.subgroups) (sized by CONFIG_BT_BAP_BASS_MAX_SUBGROUPS, default 1), and the metadata was copied with memcpy() using the raw on-air length returned by bt_bap_base_get_subgroup_codec_meta() into a metadata array sized by CONFIG_BT_AUDIO_CODEC_CFG_MAX_METADATA_SIZE (default 4). The BASE validator bt_bap_base_get_base_from_ad() only checks structural consistency and permits up to ~24 subgroups and metadata LTVs of ~240 octets. The defect is reached from the periodic advertising receive callback: pa_recv() → bt_data_parse() → pa_decode_base() → update_recv_state_base() → bt_bap_base_foreach_subgroup() → base_subgroup_meta_cb(). Every broadcast sink registers a scan-delegator receive state at creation (bt_bap_broadcast_sink_create() calls broadcast_sink_add_src()), and CONFIG_BT_BAP_BROADCAST_SINK depends on CONFIG_BT_BAP_SCAN_DELEGATOR, so the path is active in every broadcast-sink build once the device is periodic-advertising-synced. An attacker in radio range who operates a broadcast source the device syncs to — or who impersonates the advertiser address and SID of one already in use, periodic advertising data being unauthenticated — can change the BASE at will; each new BASE is re-parsed. A crafted BASE therefore writes attacker-chosen bytes past the end of a fixed static object in .bss: up to roughly 236 bytes for an oversized metadata LTV, plus whole struct bt_bap_bass_subgroup records for each subgroup beyond CONFIG_BT_BAP_BASS_MAX_SUBGROUPS. This is memory corruption of adjacent Bluetooth-audio state reachable with no pairing, bonding or GATT connection, with a potential for remote code execution in the Bluetooth RX thread; in addition, the unvalidated metadata_len is forwarded to bt_bap_scan_delegator_mod_src(), which neither clamps it nor rejects it, leading to a further copy into the receive state and to out-of-bounds memory being disclosed in the BASS receive-state notification sent to a connected Broadcast Assistant. The fix rejects a BASE carrying more subgroups than the receive state can hold (discarding the update entirely) and omits metadata that does not fit rather than copying it, and additionally honours the previously-ignored error return of the subgroup decode pass.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19570","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-19570","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-19570"}
{"incident_id":"SEA-CVE-2026-19600","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to…","organization":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate authenticated users via the debug-level Mattermost server log.. Mattermost Advisory ID project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate authenticated users via the debug-level Mattermost server log.. Mattermost Advisory ID: MMSA-2026-00763","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19600","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-19600","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-19600"}
{"incident_id":"SEA-CVE-2026-19621","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning…","organization":"Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning thread API responses, which allows an authenticated channel member to obtain server-side webhook URLs and authentication context from interactive-message posts via the postdeleted websocket event or the threads REST API.. Mattermost Advisory ID project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning thread API responses, which allows an authenticated channel member to obtain server-side webhook URLs and authentication context from interactive-message posts via the post_deleted websocket event or the threads REST API.. Mattermost Advisory ID: MMSA-2026-00766","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19621","failure_patterns":"SEA-FM-012","capabilities":"auth.destructive_action;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-19621","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-19621"}
{"incident_id":"SEA-CVE-2026-19737","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"i2sesp32triggercheck() in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking…","organization":"i2sesp32triggercheck() in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg->rx.data->configured / devcfg->tx.data->configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT() sets both .conf and .data to NULL for a direction the devicetree does not describe, so on an instance that wires only one direction — the normal shape for audio output or a worldsemi,ws2812-i2s LED strip — the other direction dereferences a NULL pointer instead of returning an error. i2strigger() is a Zephyr syscall, and zvrfyi2strigger() in drivers/i2s/i2shandlers.c validates only the device object and the presence of the trigger API pointer; the dir argument is passed to the driver unvalidated. On a build with CONFIGUSERSPACE enabled, a user-mode thread that has been granted the I2S device can issue a single i2strigger() call naming the unwired direction and cause a load from address 0 in kernel mode. Among the Espressif parts that carry this driver, userspace is available in-tree only on RISC-V SoCs with CONFIGRISCVPMP, and v4.4.0 is the first release where that is buildable project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX branches read dev_cfg->rx.data->configured / dev_cfg->tx.data->configured without first checking the stream pointers. The device instantiation macro I2S_ESP32_STREAM_INIT() sets both .conf and .data to NULL for a direction the devicetree does not describe, so on an instance that wires only one direction — the normal shape for audio output or a worldsemi,ws2812-i2s LED strip — the other direction dereferences a NULL pointer instead of returning an error. i2s_trigger() is a Zephyr syscall, and z_vrfy_i2s_trigger() in drivers/i2s/i2s_handlers.c validates only the device object and the presence of the trigger API pointer; the dir argument is passed to the driver unvalidated. On a build with CONFIG_USERSPACE enabled, a user-mode thread that has been granted the I2S device can issue a single i2s_trigger() call naming the unwired direction and cause a load from address 0 in kernel mode. Among the Espressif parts that carry this driver, userspace is available in-tree only on RISC-V SoCs with CONFIG_RISCV_PMP, and v4.4.0 is the first release where that is buildable: the ESP32-C6 HPCORE selects RISCV_PMP when it is not built for MCUboot. ESP32-C5 in v4.4.x carries the same PMP-region and userspace linker support but does not select RISCV_PMP by default. Espressif Xtensa targets do not support Zephyr userspace, and in a non-userspace build the bad direction can only come from in-kernel application code. The impact is limited to availability: the access is a read at offset 0 of the missing stream structure, so there is no attacker-controlled offset, no write primitive and no information disclosure. With the default fatal-error handler the resulting exception halts the system, giving an unprivileged user-mode thread a system-wide denial of service. The fix adds the same pointer check the I2S_DIR_BOTH branch already performed and returns -ENOSYS for a direction the instance does not implement; the driver's other entry points (i2s_esp32_config_check(), i2s_esp32_config_get(), i2s_esp32_read(), i2s_esp32_write()) already guarded the pointers, and a static audit found no equivalent unguarded path. The driver defect is older than the affected range. The unguarded dereference is present from v4.2.0 (reached through i2s_esp32_trigger_stream(), whose if (stream) guard tests the address of a struct member and is never false) and takes its present i2s_esp32_trigger_check() form in v4.3.0. No in-tree Espressif configuration before v4.4.0 can run a user-mode thread, so in v4.2.x and v4.3.x the direction argument can only come from trusted kernel code. Those releases carry the bug but are not listed as affected; the fix has also been merged to v4.3-branch as hardening.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19737","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.pii;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-19737","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-19737"}
{"incident_id":"SEA-CVE-2026-19739","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/llsw/ullllcpconnupd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the…","organization":"The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/llsw/ullllcpconnupd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification (llcprxnoderetain(), which marks it NODERXTYPERETAIN and thereby suppresses the normal recycling in ull.c). The default project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification (llcp_rx_node_retain(), which marks it NODE_RX_TYPE_RETAIN and thereby suppresses the normal recycling in ull.c). The default: arm of llcp_rp_cu_rx() and llcp_lp_cu_rx() — the \"invalid PDU, terminate the connection\" path — completed the procedure without releasing that retained node. llcp_rr_check_done() then dequeued and freed the procedure context with ctx->node_ref.rx still pointing at the retained node, dropping the last reference to it. A peer device in radio range can reach this without pairing, bonding, or encryption. Against a peripheral, the peer sends a well-formed LL_CONNECTION_UPDATE_IND with an instant a few connection events in the future (the node is retained and the procedure enters RP_CU_STATE_WAIT_INSTANT), then, before the instant is reached, sends any other LL Control PDU such as LL_LENGTH_REQ. ull_cp_rx() routes that PDU into the active remote Connection Update procedure, which takes the invalid-PDU path. The central role is reachable symmetrically after accepting an LL_CONNECTION_PARAM_REQ, and the local-procedure variant is reachable with LL_REJECT_IND. With CONFIG_BT_CTLR_ASSERT_DEBUG enabled (its default), the resulting state violates the invariant asserted in llcp_rr_check_done(), so the two-PDU sequence produces an immediate fatal error in the controller. With those asserts disabled, each occurrence permanently loses one node from the controller's small fixed RX pool (sized from CONFIG_BT_CTLR_RX_BUFFERS, which defaults to 1); repeating the sequence across reconnections exhausts the pool, after which the link-layer receive path operates on a NULL node. The impact is an unauthenticated, remotely triggerable denial of service persisting until reboot; there is no memory-disclosure or memory-corruption consequence, since the leaked node simply becomes unreachable.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19739","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-19739","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-19739"}
{"incident_id":"SEA-CVE-2026-19810","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting in unauthorized access to functionality or information normally restricted to that user.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19810","failure_patterns":"SEA-FM-003","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-19810","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-19810"}
{"incident_id":"SEA-CVE-2026-19936","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayablemsg.c shares three intrusive lists (busyctx, freectx, freechunks) and one kworkdelayable between two cooperative threads with no…","organization":"The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayablemsg.c shares three intrusive lists (busyctx, freectx, freechunks) and one kworkdelayable between two cooperative threads with no synchronization project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one k_work_delayable between two cooperative threads with no synchronization: bt_mesh_delayable_msg_manage() runs on the Bluetooth host RX thread, while delayable_msg_handler() runs on the system workqueue. Both block while the lists are in an intermediate state — the enqueuer in bt_rand(), both in bt_mesh_access_send() — which lets the other context observe torn state. delayable_msg_handler() used the result of sys_slist_get() on busy_ctx without a NULL check, and allocate_delayable_msg_ctx() tested sys_slist_is_empty() and then assumed a separate sys_slist_get() would succeed. Because CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG and CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CTX_ENABLED default to y, every model response to a received mesh message is parked on this queue, so the enqueuer runs as a direct consequence of inbound traffic. A peer that can get access-layer messages accepted by a model (it must hold the NetKey and a bound AppKey, so a legitimate or compromised network member) controls the arrival rate, the size of the elicited responses and the destination address, and thereby controls occupancy of the 4-entry context pool and the 40-entry chunk pool. Exhausting the chunk pool forces bt_mesh_delayable_msg_manage() down the purge path, which sends and releases the only queued message and leaves busy_ctx empty while the delayable work item is still armed; if the enqueuer then yields, the handler runs against the empty list. The result is a read-modify-write through a NULL-based pointer (pending_msg->fired_time += 10) at a fixed low address on the system workqueue thread. On typical targets that faults, aborting the system workqueue thread — which stops all workqueue-driven functionality, including the mesh timing machinery — or resetting the node, so the impact is loss of availability of the affected node. The write value and address are fixed and no attacker-controlled length or index is involved, so this is not exploitable for memory corruption or code execution. The same unsynchronized window also allowed one message context to be selected and released by two contexts at once, producing duplicated transmissions, duplicated send-completion callbacks and crossed chunk ownership. The fix serializes every list mutation with a k_spinlock that is never held across a blocking call, makes push_msg_from_delayable_msgs() detach the queue head atomically so a message being sent is on no list, removes the unchecked sys_slist_get() from delayable_msg_handler(), and drops any message that reaches the front of the queue while the stack is suspended or reset.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19936","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-19936","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-19936"}
{"incident_id":"SEA-CVE-2026-19937","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayablemsg.c manages a static pool of CONFIGBTMESHACCESSDELAYABLEMSGCOUNT message contexts (default 4) threaded onto a freectx or…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_COUNT message contexts (default 4) threaded onto a free_ctx or busy_ctx list. release_delayable_msg_ctx() returned a context to free_ctx only when sys_slist_find_and_remove() found it on busy_ctx. The chunk-exhaustion error path in bt_mesh_delayable_msg_manage() releases a context that was already popped off free_ctx but not yet inserted on busy_ctx, so the context was appended to neither list and was permanently lost from the pool. Because bt_mesh_delayable_msg_init() runs only once from bt_mesh_init(), and node reset/suspend only drain busy_ctx, the loss survives unprovision, re-provision and suspend/resume — it is cleared only by a reboot. The error path is reached when the chunk pool (CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CHUNK_COUNT, default 40 chunks) is short of the chunks a new delayed message needs and the oldest pending message cannot be flushed because bt_mesh_access_send() returns -EBUSY or -ENOBUFS (all segmented-TX contexts busy, or advertising/segment buffers exhausted). A peer that is provisioned into the mesh network — holding a valid NetKey plus an AppKey or DevKey bound to a server model — can drive both conditions by flooding the victim with requests that elicit segmented responses while withholding the Segment Acknowledgment, which keeps the transmit contexts occupied while queued responses hold the chunk pool. Each further request that arrives in that window leaks one context. Once the pool is drained, bt_mesh_delayable_msg_manage() returns -ENOMEM for every subsequent send and bt_mesh_model_send() propagates that error with no fallback to an immediate transmit. Since CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG and CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_CTX_ENABLED are both enabled by default, ctx->rnd_delay is set for every received access message, so all replies from Configuration Server, Health Server and application server models are silently dropped. The node keeps receiving and processing traffic but never answers, a persistent denial of service until the device is restarted. There is no memory corruption, information disclosure or integrity impact; releases before the fix compute the chunk count from the transmit buffer capacity rather than its payload length, making chunk-pool starvation — and therefore the leak — considerably easier to provoke.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19937","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-19937","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-19937"}
{"incident_id":"SEA-CVE-2026-21120","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21120","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-21120","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-21120"}
{"incident_id":"SEA-CVE-2026-24721","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","organization":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24721","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-24721","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-24721"}
{"incident_id":"SEA-CVE-2026-24722","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","organization":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24722","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-24722","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-24722"}
{"incident_id":"SEA-CVE-2026-24723","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.","organization":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5243 and later","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24723","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-24723","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-24723"}
{"incident_id":"SEA-CVE-2026-27350","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery.","organization":"Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27350","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-27350","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-27350"}
{"incident_id":"SEA-CVE-2026-34633","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34633","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-34633","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-34633"}
{"incident_id":"SEA-CVE-2026-35088","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication.","organization":"Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life telephone exchanges project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in End-Of-Life telephone exchanges: - CCT-1668 (CCT1CPU) - MAC-6400 - CXS-0424 These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update. The vendor recommends that users of these devices contact the their service department directly to determine the options for upgrading.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35088","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-35088","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-35088"}
{"incident_id":"SEA-CVE-2026-37107","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-37107","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-37107","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-37107"}
{"incident_id":"SEA-CVE-2026-3712","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for unauthenticated attackers to spoof the header to match any target URL, bypassing the whitelist and forcing the server to make HTTP requests to arbitrary internal or external destinations and return the response content.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3712","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-3712","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-3712"}
{"incident_id":"SEA-CVE-2026-40800","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40800","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-40800","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-40800"}
{"incident_id":"SEA-CVE-2026-41210","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link. In version 6.1.0 and earlier, after a victim initiates a streaming session to a malicious host, the host can send a crafted H.264 SPS NAL…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link. In version 6.1.0 and earlier, after a victim initiates a streaming session to a malicious host, the host can send a crafted H.264 SPS NAL when Moonlight selects a decoder path that does not advertise CAPABILITY_REFERENCE_FRAME_INVALIDATION_AVC. The SPS fixup path in app/streaming/video/ffmpeg.cpp parses the server-provided data with h264bitstream, where attacker-controlled seq_parameter_set_id is used to index the 32-entry sps_table without validation. A value of 32 or greater causes an out-of-bounds write and remote heap corruption in the Moonlight client. The demonstrated impact is a reliable client crash, while code execution is not established. This issue is fixed in version 6.2.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41210","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-41210","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-41210"}
{"incident_id":"SEA-CVE-2026-42633","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Subscriber SQL Injection in Events Manager <= 7.4.6 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42633","failure_patterns":"SEA-FM-002","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-42633","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-42633"}
{"incident_id":"SEA-CVE-2026-42712","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42712","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-42712","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-42712"}
{"incident_id":"SEA-CVE-2026-42716","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42716","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-42716","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-42716"}
{"incident_id":"SEA-CVE-2026-42717","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Administrator SQL Injection in Leyka <= 3.32.3 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42717","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-42717","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-42717"}
{"incident_id":"SEA-CVE-2026-42718","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42718","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-42718","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-42718"}
{"incident_id":"SEA-CVE-2026-42719","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42719","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-42719","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-42719"}
{"incident_id":"SEA-CVE-2026-42722","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42722","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-42722","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-42722"}
{"incident_id":"SEA-CVE-2026-42723","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42723","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-42723","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-42723"}
{"incident_id":"SEA-CVE-2026-44031","evidence_tier":"security_advisory","title":"Uncontrolled recursion in DcmSequenceOfItems issue could make the service unavailable","summary":"Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process…","organization":"Uncontrolled recursion in DcmSequenceOfItems project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhaustion and process crash) via a DICOM dataset containing deeply nested sequences (SQ elements). The dataset can be sent in a C-STORE request to storescp, dcmrecv, dcmqrscp, or any other DICOM service built on DCMTK, because the received dataset is parsed before any authentication takes place. Local tools such as dcmdump also crash when opening such a file. The issue is fixed in commit 885ff0f10372bd589b5f44cea974f28a3964cb0f, which adds a configurable sequence nesting depth limit (default 64).","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44031","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-44031","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-44031"}
{"incident_id":"SEA-CVE-2026-44033","evidence_tier":"security_advisory","title":"Uncontrolled recursion in XMLNode issue could make the service unavailable","summary":"Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion…","organization":"Uncontrolled recursion in XMLNode project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML document with deeply nested elements. The parser is reachable through dcmencap when encapsulating a CDA document, and through any application that calls OFXMLParser::parseFile() or OFXMLParser::parseString() on untrusted input. The issue is fixed in commit d12e350e687530eb41e2b0c860aff4d8c04e5941.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44033","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-44033","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-44033"}
{"incident_id":"SEA-CVE-2026-44035","evidence_tier":"security_advisory","title":"Uncontrolled recursion in DcmDicomDir issue could make the service unavailable","summary":"Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR…","organization":"Uncontrolled recursion in DcmDicomDir project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset of Referenced Lower-Level Directory Entity attribute. Any application that opens the DICOMDIR is affected, including dcmgpdir and media viewers built on DCMTK. The issue is fixed in commit ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44035","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-44035","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-44035"}
{"incident_id":"SEA-CVE-2026-44036","evidence_tier":"security_advisory","title":"Uncontrolled mutual recursion between DcmXMLParseHelper issue could make the service unavailable","summary":"Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause…","organization":"Uncontrolled mutual recursion between DcmXMLParseHelper project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted XML file with deeply nested sequence and item elements. The xml2dcm tool and any service that converts untrusted XML to DICOM with this code are affected. The issue is fixed in commit 87f256d73e30656a822bf7d76d1cf1d9bb693954.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44036","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-44036","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-44036"}
{"incident_id":"SEA-CVE-2026-44037","evidence_tier":"security_advisory","title":"Uncontrolled mutual recursion between DcmJSONReader issue could make the service unavailable","summary":"Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a…","organization":"Uncontrolled mutual recursion between DcmJSONReader project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a crafted DICOM JSON document with deeply nested sequence (SQ) values. The json2dcm tool and any service that converts untrusted DICOM JSON (for example, DICOMweb payloads) with this reader are affected. The issue is fixed in commit cf955e64c35a1e07ba10698f639d5dcdec53b9d7.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44037","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-44037","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-44037"}
{"incident_id":"SEA-CVE-2026-44828","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/initstep/ through initstepapi without authentication, authorization, or a setup-completion guard.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init_step_api without authentication, authorization, or a setup-completion guard. An unauthenticated requester with a valid CSRF token obtained from a public page can submit the first initialization step and reset the INIT setting, causing the instance to re-enter the setup flow. The setup response and /init/ page can expose stored PROVIDER configuration, including service credentials, in frontend content. This issue is fixed in version 4.2.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44828","failure_patterns":"SEA-FM-012","capabilities":"auth.public_publication;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-44828","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-44828"}
{"incident_id":"SEA-CVE-2026-45165","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45165","failure_patterns":"SEA-FM-003","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-45165","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-45165"}
{"incident_id":"SEA-CVE-2026-45440","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45440","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-45440","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-45440"}
{"incident_id":"SEA-CVE-2026-46449","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses network interface names to execute system utilities, resulting in command injection. An unprivileged local user with permissions to modify network interface names can exploit this by renaming a network interface to include a malicious shell payload via System Settings. When the \"Log out from your IdP\" action is subsequently triggered, the wapptunneld service processes the poisoned interface name, leading to the execution of arbitrary commands with root privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46449","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"auth.privileged_action;auth.write_action;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-46449","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-46449"}
{"incident_id":"SEA-CVE-2026-48211","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack.","organization":"An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's ChallengeToken, allowing an unauthenticated remote attacker to craft a malicious request that is executed with the privileges of an active administrator session. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48211","failure_patterns":"","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-48211","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-48211"}
{"incident_id":"SEA-CVE-2026-48382","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48382","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-48382","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-48382"}
{"incident_id":"SEA-CVE-2026-48383","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48383","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-48383","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-48383"}
{"incident_id":"SEA-CVE-2026-4894","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the…","organization":"A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an unauthenticated remote attacker adds more than one email address. The service processes the entire value as a valid list of recipients and sends the OTP code to all addresses without proper validation of all added emails (only one of them needs to be valid). Exploiting this vulnerability would allow an attacker to project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an unauthenticated remote attacker adds more than one email address. The service processes the entire value as a valid list of recipients and sends the OTP code to all addresses without proper validation of all added emails (only one of them needs to be valid). Exploiting this vulnerability would allow an attacker to: Obtain the authentication OTP; Impersonate someone else in the registration process; Register accounts using other people's email addresses without access to the mailbox; Indirectly confirm the existence of already registered email addresses.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4894","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-4894","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-4894"}
{"incident_id":"SEA-CVE-2026-49950","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which triggers pickle __reduce__ gadget execution before message type validation, achieving remote code execution as the server process which commonly runs as root on GPU nodes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-49950","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-49950","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-49950"}
{"incident_id":"SEA-CVE-2026-50054","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right, creating persistent mailbox access and mail-sending authority that survives password changes and session expiry.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50054","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-50054","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-50054"}
{"incident_id":"SEA-CVE-2026-50216","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50216","failure_patterns":"SEA-FM-010","capabilities":"auth.privileged_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-50216","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-50216"}
{"incident_id":"SEA-CVE-2026-50218","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in unauthorized reconfiguration and full compromise of the application's functionality. This attack can also be targeted against an already seeded client if the attacker knows the URL of the IDP that the client used for enrollment.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50218","failure_patterns":"SEA-FM-010","capabilities":"data.pii;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-50218","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-50218"}
{"incident_id":"SEA-CVE-2026-5048","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5048","failure_patterns":"SEA-FM-002","capabilities":"arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-5048","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-5048"}
{"incident_id":"SEA-CVE-2026-52167","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52167","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-52167","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-52167"}
{"incident_id":"SEA-CVE-2026-53709","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWTSECRETKEY, while verifyjwttoken() accepts HS256 tokens signed with that key and…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts HS256 tokens signed with that key and get_current_user() creates a platform administrator when the token subject matches PLATFORM_ADMIN_EMAIL and REQUIRE_USER_IN_DB is false. A remote unauthenticated attacker can therefore mint accepted administrator tokens without a database account. While the vulnerable signing key remains configured and the platform-admin bootstrap remains enabled, forged access survives password rotation, account deletion, and session revocation, allowing administrative disclosure, modification, and service disruption. This issue is fixed in version 1.0.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53709","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-53709","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-53709"}
{"incident_id":"SEA-CVE-2026-53711","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event handlers, and the code executes when another user views the saved prompt. The stored cross-site scripting can alter the interface, present phishing content, observe keystrokes available to the page, and act with the viewer's browser session. This issue is fixed in version 0.3.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53711","failure_patterns":"SEA-FM-010","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.untrusted_external_text;arch.event_driven;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-53711","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-53711"}
{"incident_id":"SEA-CVE-2026-54459","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not…","organization":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing operations. The POST endpoints /api/file/createFile.php and /api/file/createShareLink.php invoke FileController project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing operations. The POST endpoints /api/file/createFile.php and /api/file/createShareLink.php invoke FileController::createFile and FileController::createShareLink without rejecting a missing or invalid X-CSRF-Token header. A request issued with a logged-in user's session can create an empty file or create a share link with that user's permissions, although the default SameSite=Lax session cookie reduces ordinary cross-site POST reachability. This issue is fixed in version 3.14.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54459","failure_patterns":"","capabilities":"data.pii;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-54459","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-54459"}
{"incident_id":"SEA-CVE-2026-55383","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.","organization":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailableid without verifying mailabletype, and the JSON handlers do not enforce EmailLog project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailable_id without verifying mailable_type, and the JSON handlers do not enforce EmailLog::isExpired. A token issued for one document type can therefore disclose a different company's document when numeric identifiers collide, and an expired token can remain usable on the JSON routes GET /customer/invoices/{email_log:token}, GET /customer/estimates/{email_log:token}, and GET /customer/payments/{email_log:token}. View handlers can also mark a mismatched invoice or estimate as viewed and send a notification. This issue is fixed in version 2.4.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55383","failure_patterns":"","capabilities":"auth.financial_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-55383","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-55383"}
{"incident_id":"SEA-CVE-2026-55387","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. In version 2.3.3 and earlier, InvoiceShelf bulk-delete request validation accepts record identifiers without consistently binding them to the authenticated user's company_id. The affected DeleteCustomersRequest, DeleteEstimatesRequest, DeleteExpensesRequest, DeleteInvoiceRequest, DeleteItemsRequest, DeletePaymentsRequest, and DeleteUserRequest validators check that identifiers exist but do not consistently check tenant ownership. An authenticated user can submit another company's identifier and delete cross-company records. This vulnerability is fixed in 2.4.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55387","failure_patterns":"","capabilities":"auth.financial_action;auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-55387","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-55387"}
{"incident_id":"SEA-CVE-2026-55840","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with Strings.CI.startsWith against the configured server URL. An attacker can supply an absolute URL whose hostname begins with the legitimate hostname, causing URI.resolve() to retain the attacker URL and the prefix check to accept it. A victim who follows the crafted sign-in link can be redirected to an attacker-controlled domain after authentication, enabling phishing and possible credential or token theft. This issue is fixed in version 1.69.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55840","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-55840","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-55840"}
{"incident_id":"SEA-CVE-2026-57143","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxngsearch and the searchweb SearxNG provider pass the LLM-controlled searxngurl parameter directly to requests.get without validating its…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled searxng_url parameter directly to requests.get without validating its scheme, host, port, or resolved address. Prompt-injected content can direct the default search tool to internal JSON services, distinguish open and closed internal ports, and attempt cloud-metadata requests, with returned JSON results entering agent context. This issue is fixed in praisonaiagents 1.6.62.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57143","failure_patterns":"SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-57143","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-57143"}
{"incident_id":"SEA-CVE-2026-5727","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Contributor-level access and above, to publish their own Hello+ header/footer templates and draft currently active templates owned by higher-privileged users.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5727","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-5727","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-5727"}
{"incident_id":"SEA-CVE-2026-57458","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the oauth.authorize permission can call POST /api/v1/oauth/authorize, obtain an OAuth authorization code,…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the oauth.authorize permission can call POST /api/v1/oauth/authorize, obtain an OAuth authorization code, and exchange the code at POST /api/v1/oauth/token for a normal bearer JSON Web Token (JWT) and refresh token. The resulting credentials are not restricted by the original API token's permissions, allowing access to routes outside its declared scope for the same user. Version 2.4.0 fixes the vulnerability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57458","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-57458","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-57458"}
{"incident_id":"SEA-CVE-2026-57488","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, rawtoint in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int. On LP64 systems, values greater than INT_MAX can truncate or wrap, so the HTTP parser can accept a body length different from the declared value. A remote adjacent-network peer can use the resulting parser disagreement to leave bytes to be interpreted as another request in persistent or proxied contexts, or can make a worker wait for an extremely large body and cause denial of service. This issue is fixed in 2.0.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57488","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-57488","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-57488"}
{"incident_id":"SEA-CVE-2026-57489","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTHBYPASS enabled trust the configured reverse-proxy identity header…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTH_BYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FR_TRUSTED_PROXIES. When the backend application port is reachable directly, an unauthenticated attacker can supply X-Remote-User and obtain a session for the asserted account, including an administrator account, without a password or MFA. The flaw is limited to deployments that enable proxy-header authentication and expose an untrusted path to the backend. This issue is fixed in version 3.16.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57489","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-57489","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-57489"}
{"incident_id":"SEA-CVE-2026-57490","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the…","organization":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate() and does not enforce the account's configured TOTP factor. An attacker who knows valid primary credentials for a TOTP-enabled account can authenticate to the enabled WebDAV service without supplying the second factor and exercise the account's WebDAV file permissions. The browser login path enforces TOTP, but the separate public/webdav.php authentication callback did not. This issue is fixed in version 3.16.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57490","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.public_publication;data.credentials_secrets;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-57490","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-57490"}
{"incident_id":"SEA-CVE-2026-57491","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy::isAllowedForWrite() before…","organization":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy::isAllowedForWrite() before ZipArchive::extractTo() writes entries into the destination directory. An authenticated user with upload and extract permissions can place a blocked extension such as a PHP-family file inside a ZIP and cause it to be written to disk even when normal uploads reject that filename. Post-extraction metadata pruning does not remove the blocked file, so deployments that execute uploaded content may permit code execution. This issue is fixed in version 3.16.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57491","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-57491","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-57491"}
{"incident_id":"SEA-CVE-2026-57568","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo Markdown description because…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo Markdown description because config/markdown.php enables allow_unsafe_links. app/Http/Resources/Models/Utils/PreformattedPhotoData.php and app/Http/Resources/Models/Utils/PreFormattedAlbumData.php convert the description to HTML, and the gallery components PhotoDetails.vue, Overlay.vue, PhotoThumb.vue, AlbumHero.vue, and AlbumCard.vue render that HTML with v-html. A visitor, including an unauthenticated visitor to a public album, who clicks the rendered link executes attacker-controlled JavaScript in the Lychee origin, which can expose session data or enable authenticated requests in the victim's context. This gallery-view flaw is distinct from CVE-2026-33738, which addressed feed rendering. This issue is fixed in version 7.6.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57568","failure_patterns":"","capabilities":"auth.write_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-57568","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-57568"}
{"incident_id":"SEA-CVE-2026-57569","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original…","organization":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original hostname through app/Actions/Import/FromUrl.php to app/Image/Files/DownloadedFile.php for a separate fopen connection. An authenticated attacker who controls DNS responses can cause validation to observe a public address and the subsequent fetch to resolve the same hostname to a private or otherwise forbidden address. This DNS rebinding time-of-check to time-of-use mismatch bypasses the intended server-side request forgery protections and can reach services available from the Lychee server, subject to deployment and TLS behavior. This issue is fixed in version 7.6.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57569","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-57569","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-57569"}
{"incident_id":"SEA-CVE-2026-58242","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the attacker to be on an adjacent network. Successful exploitation could allow the attacker to obtain limited information about internal systems, resulting in low impact on confidentiality. There is no impact on integrity and availability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58242","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-58242","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-58242"}
{"incident_id":"SEA-CVE-2026-59508","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos.","organization":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59508","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-59508","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-59508"}
{"incident_id":"SEA-CVE-2026-5954","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to download package files from a public project due to improper authorization checks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5954","failure_patterns":"SEA-FM-003","capabilities":"auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-5954","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-5954"}
{"incident_id":"SEA-CVE-2026-59774","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files include app.ini and its INTERNAL_TOKEN, the attacker can chain the disclosure with internal logger access to modify a Git hook and execute commands as the Gitea service account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59774","failure_patterns":"","capabilities":"auth.write_action;auth.public_publication;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-59774","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-59774"}
{"incident_id":"SEA-CVE-2026-59963","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's private recipe identifier to AI import, file, external-link, or share-link endpoints. Request processing uses api/ai-import/, api/get_recipe_file/, api/get_external_file_link/, api/share-link/, CustomRecipePermission. The attack works because the endpoints read private recipe files, send file bytes to the configured AI provider, or create and disclose external links without object-level authorization, and api/share-link/ can create a public link when Space sharing is enabled. This can expose private recipe files and sensitive uploaded content to another same-Space user and to configured external services. This issue is fixed in version 2.6.10.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59963","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;auth.public_publication;data.pii;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-59963","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-59963"}
{"incident_id":"SEA-CVE-2026-59970","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider with a URL targeting an internal address, and invokes an AI action. In cookbook/views/api.py, the affected AI actions call completion through TARGET/api/ai-import/ and api/ai-step-sort/ while bypassing safe_request. The attack works because the server connects to the supplied provider URL from each AI action and exposes connection success, refusal, or timeout as a blind network-reachability oracle. This can reach internal services, other hosts on the server network, and cloud metadata endpoints and map reachable internal hosts and ports. This issue is fixed in version 2.6.10.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59970","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-59970","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-59970"}
{"incident_id":"SEA-CVE-2026-59976","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convertto parameter to construct an output path.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unauthenticated access, uploads an extensionless image and supplies directory traversal sequences in convert_to through /convert, the constructed path escapes the intended output directory, allowing the attacker to write converted output to arbitrary container paths, potentially overwriting files or causing denial of service. This issue is fixed in version 0.18.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59976","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-59976","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-59976"}
{"incident_id":"SEA-CVE-2026-61610","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see…","organization":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photos_star_visibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved() invokes SetPhotosHighlightedRequest::processValidatedValues() before authorization, and PhotoPolicy::canHighlight() returns true for anonymous callers without a canSee check. An unauthenticated attacker who can guess photo identifiers can distinguish existing private photos through differing success and not-found responses and can change their is_highlighted state, including for photos in private or password-protected albums. The issue is limited to installations using the non-default anonymous star-visibility setting. This issue is fixed in version 7.6.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61610","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-61610","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-61610"}
{"incident_id":"SEA-CVE-2026-61726","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated user with read and write API scope in the victim's Space supplies a private recipe or step identifier to the Step API. Request processing uses StepViewSet, IngredientViewSet, api/step/, api/step/{step_id}/, CustomIsUser, CustomRecipePermission. The attack works because the sub-resource querysets return and update private-recipe steps for non-owners because Space membership is accepted without recipe-level authorization. This can read and silently modify another same-Space member's private recipe instructions, while cross-Space access remains out of scope. This issue is fixed in version 2.6.12.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61726","failure_patterns":"","capabilities":"auth.write_action;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-61726","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-61726"}
{"incident_id":"SEA-CVE-2026-61843","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject a destination filename…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject a destination filename that already exists. An unauthenticated visitor with a valid share token and any configured share password can upload a file with the same name as an existing file and silently replace its content while the original uploader metadata remains. The same replacement gap affects ordinary authenticated uploads through /api/upload/upload.php and authenticated upload-only users who lack edit authority over the existing file. This issue is fixed in version 3.18.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61843","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-61843","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-61843"}
{"incident_id":"SEA-CVE-2026-61931","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61931","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-61931","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-61931"}
{"incident_id":"SEA-CVE-2026-62021","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Subscriber PHP Object Injection in Angio <= 1.1.1 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62021","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62021","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62021"}
{"incident_id":"SEA-CVE-2026-62030","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62030","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-62030","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62030"}
{"incident_id":"SEA-CVE-2026-62031","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated SQL Injection in uListing <= 2.2.0 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62031","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-62031","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62031"}
{"incident_id":"SEA-CVE-2026-62035","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62035","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.infrastructure_modification;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-62035","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62035"}
{"incident_id":"SEA-CVE-2026-62040","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62040","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-62040","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62040"}
{"incident_id":"SEA-CVE-2026-62050","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62050","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62050","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62050"}
{"incident_id":"SEA-CVE-2026-62051","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62051","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62051","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62051"}
{"incident_id":"SEA-CVE-2026-62052","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62052","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62052","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62052"}
{"incident_id":"SEA-CVE-2026-62053","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62053","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62053","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62053"}
{"incident_id":"SEA-CVE-2026-62054","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62054","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62054","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62054"}
{"incident_id":"SEA-CVE-2026-62076","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62076","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62076","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62076"}
{"incident_id":"SEA-CVE-2026-62077","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62077","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62077","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62077"}
{"incident_id":"SEA-CVE-2026-62086","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Juno <= 2.25 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62086","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62086","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62086"}
{"incident_id":"SEA-CVE-2026-62087","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62087","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62087","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62087"}
{"incident_id":"SEA-CVE-2026-62090","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62090","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62090","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62090"}
{"incident_id":"SEA-CVE-2026-62117","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62117","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-62117","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62117"}
{"incident_id":"SEA-CVE-2026-62120","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62120","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62120","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62120"}
{"incident_id":"SEA-CVE-2026-62123","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62123","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62123","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62123"}
{"incident_id":"SEA-CVE-2026-62124","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62124","failure_patterns":"","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62124","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62124"}
{"incident_id":"SEA-CVE-2026-62125","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62125","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62125","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62125"}
{"incident_id":"SEA-CVE-2026-62130","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62130","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62130","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62130"}
{"incident_id":"SEA-CVE-2026-62367","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local (username+password) account using only the email claim from the IdP. The fallback never checks an email_verified (or Microsoft xms_edov) signal and never requires the matched account's password. An attacker who can obtain a token from the configured issuer carrying a victim's email logs in as that victim with a full session, with no consent or interaction from the victim. Version 2.4.0 fixes the issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62367","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-62367","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62367"}
{"incident_id":"SEA-CVE-2026-62376","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the usertokens table in plaintext.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the user_tokens table in plaintext. If an attacker gains read access to the database through a backup leak, misconfigured storage, or SQL-level exposure, they can immediately use pending tokens to take over user accounts without knowing passwords. Version 2.4.0 fixes the issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62376","failure_patterns":"SEA-FM-012","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-62376","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62376"}
{"incident_id":"SEA-CVE-2026-62664","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before…","organization":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder() constructs and creates the destination. An authenticated low-privileged user with a valid CSRF token and create or owner permission on the parent can submit traversal segments to POST /api/folder/createFolder.php and create directories outside UPLOAD_DIR wherever the web-server account can write. This issue is fixed in version 3.19.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62664","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62664","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62664"}
{"incident_id":"SEA-CVE-2026-62679","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check before canonicalizing dot segments. Under the supported non-default configuration with temporary_image_link_enabled enabled, temporary_image_link_when_logged_in disabled, and secure_image_link_enabled disabled, any authenticated user can submit encoded traversal segments that pass the prefix check and are later resolved by filesystem operations. This permits reading files available to the web process, including application configuration and other users' private images, and disclosed APP_KEY or database credentials can enable further compromise. This issue is fixed in version 7.6.4.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62679","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-62679","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-62679"}
{"incident_id":"SEA-CVE-2026-63314","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/adminjson.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63314","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-63314","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-63314"}
{"incident_id":"SEA-CVE-2026-63355","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the user subsequently interacts with an affected selection menu.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63355","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-63355","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-63355"}
{"incident_id":"SEA-CVE-2026-63356","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Attacker-controlled JavaScript could be executed in the user’s browser session when the resulting error message is displayed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63356","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-63356","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-63356"}
{"incident_id":"SEA-CVE-2026-63619","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement.","organization":"Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63619","failure_patterns":"SEA-FM-003","capabilities":"auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-63619","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-63619"}
{"incident_id":"SEA-CVE-2026-64610","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service.","organization":"Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This issue affects Apache Kylin project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64610","failure_patterns":"SEA-FM-002","capabilities":"data.pii;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-64610","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-64610"}
{"incident_id":"SEA-CVE-2026-64856","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before processing short text preview requests. The endpoint still performs FileRise ACL checks, so normal installations do not expose an unauthenticated arbitrary file read, but unauthenticated requests can reach ACL evaluation instead of receiving an immediate 401 response. Only additional unusual proxy-header or ACL misconfiguration is documented as allowing requests to proceed into path and file-content handling. This issue is fixed in version 3.20.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64856","failure_patterns":"SEA-FM-002","capabilities":"data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-64856","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-64856"}
{"incident_id":"SEA-CVE-2026-64959","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 5 through 5.0.4. Certain backend cache API misses required authentication and can cause execution of injected SQL. Users are recommended to upgrade to version 5.0.5, which fixes the issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64959","failure_patterns":"SEA-FM-002","capabilities":"auth.public_publication;data.pii;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-64959","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-64959"}
{"incident_id":"SEA-CVE-2026-65101","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65101","failure_patterns":"SEA-FM-002","capabilities":"arch.distributed_tx","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-65101","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65101"}
{"incident_id":"SEA-CVE-2026-65103","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65103","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-65103","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65103"}
{"incident_id":"SEA-CVE-2026-65131","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65131","failure_patterns":"SEA-FM-006","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-65131","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65131"}
{"incident_id":"SEA-CVE-2026-65141","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65141","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-65141","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65141"}
{"incident_id":"SEA-CVE-2026-65148","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65148","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-65148","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65148"}
{"incident_id":"SEA-CVE-2026-65162","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65162","failure_patterns":"SEA-FM-002","capabilities":"auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-65162","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65162"}
{"incident_id":"SEA-CVE-2026-65164","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65164","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-65164","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65164"}
{"incident_id":"SEA-CVE-2026-65170","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65170","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-65170","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65170"}
{"incident_id":"SEA-CVE-2026-65172","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or POST requests to an AIStore proxy. A successful exploit may lead to information disclosure and unauthorized start or stop operations that affect the integrity and availability of ETL data-processing pipelines.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65172","failure_patterns":"SEA-FM-003","capabilities":"auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-65172","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65172"}
{"incident_id":"SEA-CVE-2026-65173","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65173","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-65173","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65173"}
{"incident_id":"SEA-CVE-2026-65674","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65674","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-65674","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-65674"}
{"incident_id":"SEA-CVE-2026-66482","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66482","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-66482","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-66482"}
{"incident_id":"SEA-CVE-2026-66483","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66483","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-66483","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-66483"}
{"incident_id":"SEA-CVE-2026-66563","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66563","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-66563","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-66563"}
{"incident_id":"SEA-CVE-2026-66564","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66564","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-66564","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-66564"}
{"incident_id":"SEA-CVE-2026-66565","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66565","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-66565","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-66565"}
{"incident_id":"SEA-CVE-2026-66567","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66567","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-66567","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-66567"}
{"incident_id":"SEA-CVE-2026-66568","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66568","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-66568","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-66568"}
{"incident_id":"SEA-CVE-2026-66569","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66569","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-66569","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-66569"}
{"incident_id":"SEA-CVE-2026-6723","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11. This is due to the appointment update REST API endpoint not restricting which fields can be modified by token-authenticated customers. This makes it possible for unauthenticated attackers to modify admin-controlled fields on that appointment, including faking payment confirmation, reassigning the appointment to another user, and changing the service type.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6723","failure_patterns":"","capabilities":"auth.financial_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-6723","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-6723"}
{"incident_id":"SEA-CVE-2026-67456","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67456","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-67456","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-67456"}
{"incident_id":"SEA-CVE-2026-69191","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows. A user with otherwise valid credentials for a disabled method can call its backend endpoint directly and authenticate despite the administrator's login-method policy. The flaw does not permit credential-free authentication. This issue is fixed in version 3.21.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69191","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-69191","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69191"}
{"incident_id":"SEA-CVE-2026-69227","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A flaw in Portal for ArcGIS allows unauthenticated access to","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69227","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-69227","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69227"}
{"incident_id":"SEA-CVE-2026-69435","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69435","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"auth.infrastructure_modification;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-69435","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69435"}
{"incident_id":"SEA-CVE-2026-69596","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69596","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-69596","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69596"}
{"incident_id":"SEA-CVE-2026-69743","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69743","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-69743","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69743"}
{"incident_id":"SEA-CVE-2026-69798","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69798","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-69798","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69798"}
{"incident_id":"SEA-CVE-2026-69802","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69802","failure_patterns":"","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-69802","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69802"}
{"incident_id":"SEA-CVE-2026-69830","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69830","failure_patterns":"SEA-FM-001;SEA-FM-008","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Idempotency and re-validation at execution: Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","cve_references":"CVE-2026-69830","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69830"}
{"incident_id":"SEA-CVE-2026-69905","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69905","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-69905","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69905"}
{"incident_id":"SEA-CVE-2026-69964","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69964","failure_patterns":"","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-69964","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69964"}
{"incident_id":"SEA-CVE-2026-69977","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69977","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-69977","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-69977"}
{"incident_id":"SEA-CVE-2026-70015","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70015","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70015","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70015"}
{"incident_id":"SEA-CVE-2026-70049","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70049","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-70049","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70049"}
{"incident_id":"SEA-CVE-2026-70056","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70056","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70056","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70056"}
{"incident_id":"SEA-CVE-2026-70057","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70057","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70057","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70057"}
{"incident_id":"SEA-CVE-2026-70066","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70066","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70066","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70066"}
{"incident_id":"SEA-CVE-2026-70083","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70083","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70083","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70083"}
{"incident_id":"SEA-CVE-2026-70085","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70085","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-70085","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70085"}
{"incident_id":"SEA-CVE-2026-70087","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70087","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70087","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70087"}
{"incident_id":"SEA-CVE-2026-70118","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70118","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70118","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70118"}
{"incident_id":"SEA-CVE-2026-70140","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70140","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70140","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70140"}
{"incident_id":"SEA-CVE-2026-70142","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70142","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70142","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70142"}
{"incident_id":"SEA-CVE-2026-70158","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-70158","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-70158","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-70158"}
{"incident_id":"SEA-CVE-2026-71854","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the /api/player/ lessons endpoints can be called without authentication, and they trust a client-supplied userId query parameter without verifying that the caller is that user or a member of the exercise. An unauthenticated client that knows an exercise UUID can read lessons-learned questions and answers (including each answer's author identity) and create or overwrite answers attributed to an arbitrary user. Version 2.260622.0 contains a patch.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71854","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-71854","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-71854"}
{"incident_id":"SEA-CVE-2026-71895","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration.","organization":"An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration. The exposed kubeconfig data contains credentials that may allow users to authenticate directly to the Kubernetes API outside DolphinScheduler. The impact depends on the permissions granted to the disclosed credentials. If the kubeconfig provides cluster-admin or broadly privileged service-account access, an attacker may read Kubernetes Secrets, create pods, and establish persistent access to the cluster. This issue affects Apache DolphinScheduler project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration. The exposed kubeconfig data contains credentials that may allow users to authenticate directly to the Kubernetes API outside DolphinScheduler. The impact depends on the permissions granted to the disclosed credentials. If the kubeconfig provides cluster-admin or broadly privileged service-account access, an attacker may read Kubernetes Secrets, create pods, and establish persistent access to the cluster. This issue affects Apache DolphinScheduler: from 3.2.0 before 3.4.3. Users are recommended to upgrade to version 3.4.3, which fixes the issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71895","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.infrastructure_modification;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-71895","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-71895"}
{"incident_id":"SEA-CVE-2026-73179","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurrent token exchange requests that race the non-atomic find-then-delete operation against a shared relational database under READ_COMMITTED isolation. Users are recommended to upgrade to versions 4.2.4 or 4.1.9 or 3.6.13, which fixes this issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73179","failure_patterns":"SEA-FM-012","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-73179","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-73179"}
{"incident_id":"SEA-CVE-2026-75095","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75095","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-75095","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75095"}
{"incident_id":"SEA-CVE-2026-75346","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75346","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-75346","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75346"}
{"incident_id":"SEA-CVE-2026-75347","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This allows a remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75347","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-75347","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75347"}
{"incident_id":"SEA-CVE-2026-75348","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure() when it parses recognized optional socket address information items of type 0x8000 or 0x8001 without first validating that the remaining CPF buffer contains the complete fixed sockaddr structure. This allows a remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75348","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-75348","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75348"}
{"incident_id":"SEA-CVE-2026-75350","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Get_Attribute_List service. This allows a remote attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75350","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-75350","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75350"}
{"incident_id":"SEA-CVE-2026-75351","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75351","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-75351","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75351"}
{"incident_id":"SEA-CVE-2026-75352","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75352","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-75352","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75352"}
{"incident_id":"SEA-CVE-2026-75353","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75353","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-75353","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75353"}
{"incident_id":"SEA-CVE-2026-75559","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The smartphone application \"Vehicle Inspection Certificate Viewer\" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75559","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-75559","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75559"}
{"incident_id":"SEA-CVE-2026-75748","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75748","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-75748","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75748"}
{"incident_id":"SEA-CVE-2026-75888","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart URL without proper validation. This allows the user to make the console pod fetch arbitrary URLs, potentially leading to the disclosure of sensitive information through error messages or enabling blind port scanning within the cluster.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75888","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-75888","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75888"}
{"incident_id":"SEA-CVE-2026-75903","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated-login pairing credential file on Nginx-based installations, where the plugin's generated server configuration snippet guards the wrong directory path. This makes it possible for unauthenticated attackers to retrieve the stored credentials, forge signed REST API requests, and log in as an administrator.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75903","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-75903","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-75903"}
{"incident_id":"SEA-CVE-2026-76001","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76001","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-76001","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-76001"}
{"incident_id":"SEA-CVE-2026-76066","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"IntentKit through 2.6.3 contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than the per-request narrowed tool advertisement enforced by ToolBindingMiddleware, allowing owner-only state-changing tools such as wallet transfer, posting, memory-write, and call-agent to execute without any human-in-the-loop or approval gate. An unauthenticated or public caller in WEB, API, TWITTER, or TELEGRAM contexts can exploit this by supplying the exact de-advertised tool name and arguments via indirect prompt injection or by replaying checkpoint and history data on a reused thread, achieving unauthorized execution of owner-restricted capabilities.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76066","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"auth.write_action;auth.public_publication;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-76066","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-76066"}
{"incident_id":"SEA-CVE-2026-76519","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with&nbsp;root privileges on the underlying operating system.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76519","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-76519","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-76519"}
{"incident_id":"SEA-CVE-2026-76656","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76656","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-76656","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-76656"}
{"incident_id":"SEA-CVE-2026-76659","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76659","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-76659","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-76659"}
{"incident_id":"SEA-CVE-2026-76972","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application. If an authenticated victim accesses a page that displays this stored content, the injected input is processed during web page generation, resulting in the execution of malicious content in the victim�s browser context. This could allow the attacker to access or modify information within the victim�s browser scope. Successful exploitation could allow the attacker to access session information, modify rendered page content and disrupt the victim's use of the application, resulting in a low impact on confidentiality, integrity and availability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76972","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-76972","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-76972"}
{"incident_id":"SEA-CVE-2026-77114","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dgthumberwebhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that logging be enabled in the plugin's Advanced settings, which is only the default state when WP_DEBUG is true; otherwise an administrator must manually enable it.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77114","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-77114","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77114"}
{"incident_id":"SEA-CVE-2026-77183","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with FooSales Cashier-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77183","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-77183","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77183"}
{"incident_id":"SEA-CVE-2026-77206","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a fall-through where it incorrectly dereferences ike->sa.st_eap which is NULL. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. The bug results in a crash and restart of the pluto daemon. No remote code execution is possible. Continued exploitation can cause a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77206","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-77206","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77206"}
{"incident_id":"SEA-CVE-2026-77207","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with…","organization":"Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls() and then iterates the certificate list with SECPKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no certificates project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS7 blob with SEC_PKCS7ContainsCertsOrCrls() and then iterates the certificate list with SEC_PKCS7GetCertificateList(). The two NSS APIs disagree on a SignedData that carries a CRL but no certificates: ContainsCertsOrCrls() returns PR_TRUE (there is a CRL), so the guard passes, but GetCertificateList() returns NULL (there are no certificates). This causes libreswan to dereference a null pointer leading to a crash and restart. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. No remote code execution is possible. Continued exploitation can cause a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77207","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-77207","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77207"}
{"incident_id":"SEA-CVE-2026-77362","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field. The tasks_filter tool exposes group counts derived from denied notes, makemd_query passes unfiltered sibling result fields through, and list_templates exposes template paths and parsed user-function bodies without a read-whitelist check. An authenticated caller can consequently infer or read data from notes outside the caller's read ACL. Version 1.3.1 fixes the vulnerability by filtering path-attributable fields and applying the read whitelist to list_templates.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77362","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-77362","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77362"}
{"incident_id":"SEA-CVE-2026-77363","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a malicious web page can send requests to the local MCP endpoint and receive unrestricted vault access through the http-local caller. Version 1.3.1 fixes the vulnerability by enabling host, origin, and DNS-rebinding validation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77363","failure_patterns":"SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-77363","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77363"}
{"incident_id":"SEA-CVE-2026-77427","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENTTOKENSKEY or…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENT_TOKENS_KEY or metadata/persistent_tokens.key can activate a published legacy compatibility key. If an attacker separately obtains ciphertext-bearing account or configuration files, the known fallback key can enable decryption of TOTP secrets or credentials. Docker installations already generated a unique persistent key, and existing installations are not automatically rotated because doing so could make encrypted state unreadable. This issue is fixed in version 3.22.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77427","failure_patterns":"SEA-FM-012","capabilities":"auth.code_execution;data.credentials_secrets;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-77427","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77427"}
{"incident_id":"SEA-CVE-2026-77466","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::getsupportedproviders(), but…","organization":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::get_supported_providers(), but CreateSessionRequest validates only that the submitted provider is an OmnipayProviderType and does not enforce OmnipayProviderType::isAllowed(). A buyer, including a guest when webshop_allow_guest_checkout is enabled, can submit Dummy directly and complete the test gateway flow without a real payment. When webshop_auto_fulfill_enabled is enabled, OrderCompletedListener::fullfillOrder() can then release the purchasable item. The issue requires access to the Supporter or Pro webshop and an enabled purchasable item. Testing bypassed the closed-source license middleware, so whether the real license layer performs additional payment-provider validation remains unverified. The payment finalize status check itself is not the root cause. This issue is fixed in version 7.7.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77466","failure_patterns":"","capabilities":"auth.financial_action;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-77466","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77466"}
{"incident_id":"SEA-CVE-2026-77467","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in…","organization":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in ImagickHandler project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in ImagickHandler::loadPdf(). An authenticated user who can upload a small PDF with an oversized /MediaBox can cause Imagick::readImage() to consume substantial CPU before failing to produce an image. When QUEUE_CONNECTION selects synchronous processing the request can occupy a web worker, while the official asynchronous Docker configuration can clog the shared image-processing queue and delay other work. The advisory did not identify a Ghostscript sandbox escape. This issue is fixed in version 7.7.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77467","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;data.pii;data.uploaded_files;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-77467","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77467"}
{"incident_id":"SEA-CVE-2026-7767","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user controlling a Kubernetes agent to cause sensitive authentication tokens to be sent to an unintended server due to improper redirect validation in the Kubernetes proxy.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7767","failure_patterns":"SEA-FM-010","capabilities":"auth.infrastructure_modification;data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-7767","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-7767"}
{"incident_id":"SEA-CVE-2026-77711","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"When Jetty's HttpClient make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"When Jetty's HttpClient make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request with the Proxy-Authentication header, which arrives to the server, that now has access to the proxy credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77711","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-77711","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77711"}
{"incident_id":"SEA-CVE-2026-77900","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77900","failure_patterns":"","capabilities":"auth.code_execution;auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-77900","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77900"}
{"incident_id":"SEA-CVE-2026-77931","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browse_webpage, search_web, and torrent metadata parsers, which then get passed to the unrestricted ExecuteCommandTool via asyncio.create_subprocess_shell. Attackers can craft content that instructs the model to invoke execute_command with confirm_dangerous set to true, bypassing the validate_command_safety denylist and exploiting the admin session's is_admin context to achieve remote code execution on the host.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77931","failure_patterns":"SEA-FM-004;SEA-FM-002","capabilities":"auth.privileged_action;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-77931","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-77931"}
{"incident_id":"SEA-CVE-2026-78013","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Protection mechanism bypass.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78013","failure_patterns":"SEA-FM-006","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-78013","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78013"}
{"incident_id":"SEA-CVE-2026-78020","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78020","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-78020","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78020"}
{"incident_id":"SEA-CVE-2026-78024","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, Server-side request forgery, and Unauthorized access.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78024","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-78024","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78024"}
{"incident_id":"SEA-CVE-2026-78027","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78027","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-78027","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78027"}
{"incident_id":"SEA-CVE-2026-7826","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function (src/serializers/serializerio.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example,…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service or disclose heap memory by supplying a crafted RDB stream whose sub-buffer length field exceeds the remaining buffer size. The only bounds check is an ASSERT(), which is compiled out in release builds, so memcpy() reads past the end of the heap allocation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7826","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.credentials_secrets;arch.caching;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-7826","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-7826"}
{"incident_id":"SEA-CVE-2026-7827","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders//decodegraphentities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders//decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service and possibly execute arbitrary code by supplying a crafted RDB stream with an attacker-controlled entity property count. The count sizes two variable-length arrays on the thread stack with no upper bound, and the decoder then fills them with attacker-supplied values.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7827","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.credentials_secrets;arch.caching;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-7827","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-7827"}
{"incident_id":"SEA-CVE-2026-78355","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory.","organization":"A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating system file permissions. On OTRS versions prior to OTRS 7, the effective permissions of the web server process are relevant. Starting with OTRS 7, access is limited by the permissions of the dedicated OTRS user. Files with overly permissive ownership or file system permissions may therefore also be affected. The affected functionality may additionally attempt to include controlled files in a support bundle. However, support bundles are sent to a predefined OTRS support address, and direct disclosure of arbitrary files to the attacker has not been demonstrated. An attacker therefore requires valid administrative access to exploit the vulnerable functionality. The primary demonstrated impact is the deletion of files outside the intended directory within the effective permissions of the OTRS application process. This issue affects OTRS project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating system file permissions. On OTRS versions prior to OTRS 7, the effective permissions of the web server process are relevant. Starting with OTRS 7, access is limited by the permissions of the dedicated OTRS user. Files with overly permissive ownership or file system permissions may therefore also be affected. The affected functionality may additionally attempt to include controlled files in a support bundle. However, support bundles are sent to a predefined OTRS support address, and direct disclosure of arbitrary files to the attacker has not been demonstrated. An attacker therefore requires valid administrative access to exploit the vulnerable functionality. The primary demonstrated impact is the deletion of files outside the intended directory within the effective permissions of the OTRS application process. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78355","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-78355","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78355"}
{"incident_id":"SEA-CVE-2026-78356","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated…","organization":"The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend routes and their associated authorization groups, authentication configuration, enabled product features, third-party integration settings, and other implementation details. The exposed configuration does not directly contain user credentials or provide unauthorized modification of the OTRS configuration. However, the disclosed information may assist an attacker in fingerprinting the affected OTRS installation and identifying enabled functionality or security-relevant configuration that could be used to prepare further attacks. This issue affects OTRS project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend routes and their associated authorization groups, authentication configuration, enabled product features, third-party integration settings, and other implementation details. The exposed configuration does not directly contain user credentials or provide unauthorized modification of the OTRS configuration. However, the disclosed information may assist an attacker in fingerprinting the affected OTRS installation and identifying enabled functionality or security-relevant configuration that could be used to prepare further attacks. This issue affects OTRS: 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78356","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"data.pii;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-78356","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78356"}
{"incident_id":"SEA-CVE-2026-78357","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed.","organization":"Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time, which can be approximately 16 hours. An attacker who has previously obtained a valid authentication token can therefore continue to access OTRS with the privileges of the affected agent or customer user even after the corresponding account has been deactivated or the user's password has been changed. The vulnerability does not allow an attacker to obtain authentication tokens by itself. Exploitation requires possession of a previously issued and still valid token. The actual impact depends on the privileges associated with the compromised token. Customer user tokens are limited to the permissions of the affected customer account, while agent tokens may provide access to broader ticket, customer, or administrative functionality depending on the assigned permissions. This issue affects OTRS project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time, which can be approximately 16 hours. An attacker who has previously obtained a valid authentication token can therefore continue to access OTRS with the privileges of the affected agent or customer user even after the corresponding account has been deactivated or the user's password has been changed. The vulnerability does not allow an attacker to obtain authentication tokens by itself. Exploitation requires possession of a previously issued and still valid token. The actual impact depends on the privileges associated with the compromised token. Customer user tokens are limited to the permissions of the affected customer account, while agent tokens may provide access to broader ticket, customer, or administrative functionality depending on the assigned permissions. This issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.7.X","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78357","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"data.pii;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-78357","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78357"}
{"incident_id":"SEA-CVE-2026-78399","evidence_tier":"security_advisory","title":"security verify access issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"security verify access project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78399","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-78399","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78399"}
{"incident_id":"SEA-CVE-2026-78407","evidence_tier":"security_advisory","title":"security verify access issue could run attacker-controlled scripts in a browser","summary":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting.","organization":"security verify access project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78407","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-78407","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78407"}
{"incident_id":"SEA-CVE-2026-78529","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78529","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-78529","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78529"}
{"incident_id":"SEA-CVE-2026-78531","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78531","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-78531","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78531"}
{"incident_id":"SEA-CVE-2026-78533","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78533","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-78533","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78533"}
{"incident_id":"SEA-CVE-2026-78535","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78535","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-78535","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78535"}
{"incident_id":"SEA-CVE-2026-78557","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78557","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-78557","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78557"}
{"incident_id":"SEA-CVE-2026-78673","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78673","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-78673","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78673"}
{"incident_id":"SEA-CVE-2026-78851","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78851","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-78851","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-78851"}
{"incident_id":"SEA-CVE-2026-79957","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that the authenticated token belongs to the requested account (CWE-639). Any authenticated user can iterate the ID parameter to retrieve the full profile record of every other user, including passwords stored in cleartext (CWE-256), enabling account takeover and credential-stuffing attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79957","failure_patterns":"SEA-FM-003","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-79957","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-79957"}
{"incident_id":"SEA-CVE-2026-80381","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80381","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-80381","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-80381"}
{"incident_id":"SEA-CVE-2026-81420","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81420","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-81420","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-81420"}
{"incident_id":"SEA-CVE-2026-81534","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authorization and input sanitization in the send_test_mail() function, which allows user-controlled PHP code to be written to executable files in the uploads directory. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary PHP code on the server, leading to full site compromise.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81534","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-81534","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-81534"}
{"incident_id":"SEA-CVE-2026-81649","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer order data, overwrite the payment gateway configuration so that payments are credited elsewhere, and mark unpaid orders as paid. The same missing authorisation also allows arbitrary script to be stored in a field which is output unescaped on the classic checkout, leading to unauthenticated stored XSS on stores that do not use the block-based checkout.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81649","failure_patterns":"SEA-FM-003","capabilities":"auth.financial_action;auth.write_action;data.pii;data.credentials_secrets;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-81649","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-81649"}
{"incident_id":"SEA-CVE-2026-81797","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81797","failure_patterns":"","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-81797","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-81797"}
{"incident_id":"SEA-CVE-2026-81858","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81858","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-81858","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-81858"}
{"incident_id":"SEA-CVE-2026-81932","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81932","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-81932","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-81932"}
{"incident_id":"SEA-CVE-2026-82101","evidence_tier":"security_advisory","title":"datastage on cloud pak for data issue could expose restricted files","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datastage on cloud pak for data project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82101","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-82101","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-82101"}
{"incident_id":"SEA-CVE-2026-82110","evidence_tier":"security_advisory","title":"datastage on cloud pak for data issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"datastage on cloud pak for data project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82110","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-82110","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-82110"}
{"incident_id":"SEA-CVE-2026-82334","evidence_tier":"security_advisory","title":"guardium data protection issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"guardium data protection project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82334","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-82334","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-82334"}
{"incident_id":"SEA-CVE-2026-82335","evidence_tier":"security_advisory","title":"guardium data protection issue could allow unintended commands to run","summary":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser.","organization":"guardium data protection project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of service or arbitrary code execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82335","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-82335","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-82335"}
{"incident_id":"SEA-CVE-2026-82344","evidence_tier":"security_advisory","title":"guardium data protection issue could allow unintended commands to run","summary":"IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality.","organization":"guardium data protection project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial of service or arbitrary code execution on the affected system.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82344","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-82344","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-82344"}
{"incident_id":"SEA-CVE-2026-82627","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object when a third-party integration plugin (such as PeepSo, MailPoet, WPForms, etc) is installed and a recipe is configured that stores attacker-controlled data as trigger meta. The additional presence of a POP chain within Uncanny Automator allows attackers to delete arbitrary files on the server.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82627","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"auth.destructive_action;auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-82627","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-82627"}
{"incident_id":"SEA-CVE-2026-83526","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the checkmimetype function.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype function. This is due to insufficient file type validation in check_mimetype(), which writes attacker-supplied remote file content to the public uploads directory before any MIME or extension check, combined with a missing capability check on new player creation. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. This requires successfully exploiting a race condition.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83526","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;auth.public_publication;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-83526","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-83526"}
{"incident_id":"SEA-CVE-2026-83846","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83846","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-83846","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-83846"}
{"incident_id":"SEA-CVE-2026-83848","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83848","failure_patterns":"","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-83848","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-83848"}
{"incident_id":"SEA-CVE-2026-83886","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83886","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-83886","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-83886"}
{"incident_id":"SEA-CVE-2026-83908","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83908","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-83908","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-83908"}
{"incident_id":"SEA-CVE-2026-83915","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83915","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-83915","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-83915"}
{"incident_id":"SEA-CVE-2026-83930","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83930","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-83930","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-83930"}
{"incident_id":"SEA-CVE-2026-84013","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84013","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84013","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84013"}
{"incident_id":"SEA-CVE-2026-84020","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84020","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84020","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84020"}
{"incident_id":"SEA-CVE-2026-84058","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84058","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-84058","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84058"}
{"incident_id":"SEA-CVE-2026-84230","evidence_tier":"security_advisory","title":"guardium data protection issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"guardium data protection project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84230","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-84230","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84230"}
{"incident_id":"SEA-CVE-2026-84247","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84247","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-84247","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84247"}
{"incident_id":"SEA-CVE-2026-84251","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84251","failure_patterns":"","capabilities":"auth.privileged_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84251","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84251"}
{"incident_id":"SEA-CVE-2026-84252","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugin through 1.0.3. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84252","failure_patterns":"","capabilities":"auth.privileged_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84252","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84252"}
{"incident_id":"SEA-CVE-2026-84253","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84253","failure_patterns":"","capabilities":"auth.privileged_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84253","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84253"}
{"incident_id":"SEA-CVE-2026-84254","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84254","failure_patterns":"","capabilities":"auth.privileged_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84254","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84254"}
{"incident_id":"SEA-CVE-2026-84258","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84258","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84258","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84258"}
{"incident_id":"SEA-CVE-2026-84259","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84259","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84259","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84259"}
{"incident_id":"SEA-CVE-2026-84260","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84260","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84260","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84260"}
{"incident_id":"SEA-CVE-2026-84261","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84261","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84261","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84261"}
{"incident_id":"SEA-CVE-2026-84272","evidence_tier":"security_advisory","title":"Security issue reported in guardium data protection","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"guardium data protection project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84272","failure_patterns":"","capabilities":"auth.infrastructure_modification;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84272","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84272"}
{"incident_id":"SEA-CVE-2026-84274","evidence_tier":"security_advisory","title":"guardium data protection issue could allow unauthorized access","summary":"IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the…","organization":"guardium data protection project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the relevant application or container logs could obtain these credentials and use them to impersonate services or gain unauthorized access to the Guardium control plane.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84274","failure_patterns":"SEA-FM-003","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-84274","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84274"}
{"incident_id":"SEA-CVE-2026-84276","evidence_tier":"security_advisory","title":"Security issue reported in guardium data protection","summary":"IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide…","organization":"guardium data protection project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the edge-controller process to terminate unexpectedly.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84276","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-84276","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84276"}
{"incident_id":"SEA-CVE-2026-84360","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcpmessage require only ordinary authentication before…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcp_message require only ordinary authentication before exposing nginx_config_add and nginx_config_modify. An OTP-enabled user with a normal JWT but no valid X-Secure-Session-ID can therefore create or modify Nginx configuration and trigger reload behavior through MCP, bypassing the intended step-up control. This issue is fixed in version 2.4.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84360","failure_patterns":"SEA-FM-010","capabilities":"auth.write_action;data.pii;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84360","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84360"}
{"incident_id":"SEA-CVE-2026-84418","evidence_tier":"security_advisory","title":"Security issue reported in datastage on cloud pak for data","summary":"IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by…","organization":"datastage on cloud pak for data project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84418","failure_patterns":"","capabilities":"auth.code_execution;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84418","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84418"}
{"incident_id":"SEA-CVE-2026-84731","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters. Consequently, the server responds with a Set-Cookie header containing a valid JSESSIONID. This session cookie decodes to a JSON Web Token (JWT) granting maximum cluster administrative privileges. Successful exploitation allows the attacker to execute root-level commands on all Controller VMs (CVMs) in the cluster, leading to complete cluster destruction and unauthorized access to VM memory and virtual disks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84731","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.infrastructure_modification;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-84731","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84731"}
{"incident_id":"SEA-CVE-2026-84734","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress plugin through 1.0 is configured with.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84734","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84734","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-84734"}
{"incident_id":"SEA-CVE-2026-85000","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on an unauthenticated request that triggers a server-side, credential-bearing request to a third-party API and stores…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on an unauthenticated request that triggers a server-side, credential-bearing request to a third-party API and stores attacker-controlled cache entries, allowing unauthenticated attackers to consume the site owner's third-party API quota and write unbounded records into the site's database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85000","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;arch.caching;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-85000","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85000"}
{"incident_id":"SEA-CVE-2026-85121","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can take the site offline and deactivate all of its Insurify WordPress plugin through 1.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85121","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85121","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85121"}
{"incident_id":"SEA-CVE-2026-85126","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing users holding one of its own low privileged roles to grant themselves the administrator role or arbitrary capabilities, leading to a full site takeover.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85126","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85126","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85126"}
{"incident_id":"SEA-CVE-2026-85231","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSECGSS (Remote…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85231","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-85231","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85231"}
{"incident_id":"SEA-CVE-2026-85323","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85323","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85323","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85323"}
{"incident_id":"SEA-CVE-2026-85332","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85332","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85332","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85332"}
{"incident_id":"SEA-CVE-2026-85339","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85339","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-85339","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85339"}
{"incident_id":"SEA-CVE-2026-85342","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85342","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85342","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85342"}
{"incident_id":"SEA-CVE-2026-85345","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases,…","organization":"The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases, allowing users with Contributor-level access and above to perform Server-Side Request Forgery (SSRF) attacks. The impact is limited to a semi-blind oracle project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based restriction fails to cover all cases, allowing users with Contributor-level access and above to perform Server-Side Request Forgery (SSRF) attacks. The impact is limited to a semi-blind oracle: the server's fetch reveals whether an internal resource responds and its HTTP status, but the resource's contents are not returned to the attacker.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85345","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-85345","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85345"}
{"incident_id":"SEA-CVE-2026-85352","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85352","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85352","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85352"}
{"incident_id":"SEA-CVE-2026-85357","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85357","failure_patterns":"SEA-FM-001;SEA-FM-008","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Idempotency and re-validation at execution: Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","cve_references":"CVE-2026-85357","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85357"}
{"incident_id":"SEA-CVE-2026-85421","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states, and modify system configurations, leading to a complete compromise of the streaming service control plane.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85421","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-85421","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85421"}
{"incident_id":"SEA-CVE-2026-85423","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the application to establish SSH connections to arbitrary hosts and execute arbitrary system commands, effectively turning the appliance into an unauthenticated proxy or execution vector.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85423","failure_patterns":"","capabilities":"arch.content_ingestion_rag","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85423","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85423"}
{"incident_id":"SEA-CVE-2026-85473","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the affected service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85473","failure_patterns":"","capabilities":"auth.destructive_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85473","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85473"}
{"incident_id":"SEA-CVE-2026-85487","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion operations.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85487","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-85487","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85487"}
{"incident_id":"SEA-CVE-2026-85489","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and altering operational settings. This vulnerability affects all versions of Brocade ASCG before 3.5.0.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85489","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85489","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85489"}
{"incident_id":"SEA-CVE-2026-85529","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in the GraphQL API.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85529","failure_patterns":"SEA-FM-003","capabilities":"auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-85529","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85529"}
{"incident_id":"SEA-CVE-2026-85634","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker with the Deployer RBAC role can use path traversal sequences to access files outside the restricted deployment directory. This can allow the attacker to delete arbitrary directories or create files with arbitrary content, leading to a full privilege escalation to the management SuperUser role.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85634","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-85634","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85634"}
{"incident_id":"SEA-CVE-2026-85659","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the update_cc_details() AJAX handler forwards an attacker-supplied username parameter to ONTRAPORT via api_call('update_cc_details', ...) before performing the local username_exists() collision check, and aborts without rolling back the remote rename when a collision is detected — leaving the remote ONTRAPORT contact renamed to an existing WordPress Administrator's login. On a subsequent login attempt, user_login() (hooked to wp_authenticate) authenticates against ONTRAPORT using the renamed login and the attacker's own password, resolves the local WordPress user row via get_user_by('login', $username) — which now selects the real Administrator's row — and calls wp_set_password() against that Administrator's user ID; because the user_level != 10 guard only suppresses PilotPress's own cookie issuance rather than returning a WP_Error to core, WordPress proceeds to validate the newly-synchronized password and issues a full Administrator authentication cookie to the attacker. This makes it possible for authenticated attackers with Subscriber-level access and above — specifically any PilotPress member holding a valid ONTRAPORT contact and the Customer Center nonce — to fully take over an Administrator account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85659","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-85659","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85659"}
{"incident_id":"SEA-CVE-2026-85792","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85792","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-85792","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85792"}
{"incident_id":"SEA-CVE-2026-85795","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85795","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85795","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85795"}
{"incident_id":"SEA-CVE-2026-85809","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85809","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-85809","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85809"}
{"incident_id":"SEA-CVE-2026-85810","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85810","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85810","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85810"}
{"incident_id":"SEA-CVE-2026-85829","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85829","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85829","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85829"}
{"incident_id":"SEA-CVE-2026-85843","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85843","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85843","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85843"}
{"incident_id":"SEA-CVE-2026-85849","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85849","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85849","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85849"}
{"incident_id":"SEA-CVE-2026-85854","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85854","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85854","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85854"}
{"incident_id":"SEA-CVE-2026-85855","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85855","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85855","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85855"}
{"incident_id":"SEA-CVE-2026-85860","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85860","failure_patterns":"","capabilities":"arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85860","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85860"}
{"incident_id":"SEA-CVE-2026-85861","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85861","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85861","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85861"}
{"incident_id":"SEA-CVE-2026-85863","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85863","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85863","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85863"}
{"incident_id":"SEA-CVE-2026-85864","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper privilege management in Python allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85864","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85864","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85864"}
{"incident_id":"SEA-CVE-2026-85865","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85865","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85865","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85865"}
{"incident_id":"SEA-CVE-2026-85876","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in SQL Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85876","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85876","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85876"}
{"incident_id":"SEA-CVE-2026-85884","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85884","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85884","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85884"}
{"incident_id":"SEA-CVE-2026-85904","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85904","failure_patterns":"SEA-FM-001;SEA-FM-008","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Idempotency and re-validation at execution: Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","cve_references":"CVE-2026-85904","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85904"}
{"incident_id":"SEA-CVE-2026-85911","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85911","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85911","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85911"}
{"incident_id":"SEA-CVE-2026-85912","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85912","failure_patterns":"SEA-FM-001;SEA-FM-008","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Idempotency and re-validation at execution: Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","cve_references":"CVE-2026-85912","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85912"}
{"incident_id":"SEA-CVE-2026-85914","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85914","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85914","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85914"}
{"incident_id":"SEA-CVE-2026-85934","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85934","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85934","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85934"}
{"incident_id":"SEA-CVE-2026-85955","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could result in server-side code execution with elevated permissions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85955","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-85955","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85955"}
{"incident_id":"SEA-CVE-2026-85956","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or modification of security-critical data.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85956","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-85956","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85956"}
{"incident_id":"SEA-CVE-2026-85958","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85958","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-85958","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85958"}
{"incident_id":"SEA-CVE-2026-85959","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85959","failure_patterns":"SEA-FM-003","capabilities":"data.pii;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-85959","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85959"}
{"incident_id":"SEA-CVE-2026-85960","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's permissions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85960","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85960","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85960"}
{"incident_id":"SEA-CVE-2026-85961","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected cloud resources.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85961","failure_patterns":"SEA-FM-003","capabilities":"auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-85961","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85961"}
{"incident_id":"SEA-CVE-2026-85962","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments that use SAML authentication, an unauthenticated remote attacker could cause the affected server to accept an assertion that should be rejected, potentially resulting in unauthorized access.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85962","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-85962","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85962"}
{"incident_id":"SEA-CVE-2026-85964","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85964","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85964","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85964"}
{"incident_id":"SEA-CVE-2026-85967","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser session, which could result in unauthorized actions or disclosure of information accessible to that user.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85967","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85967","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85967"}
{"incident_id":"SEA-CVE-2026-85970","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow crafted XML to cause server-side requests or disclosure of local files.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85970","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85970","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85970"}
{"incident_id":"SEA-CVE-2026-85972","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations. A network-positioned attacker could impersonate trusted authentication infrastructure, potentially resulting in unauthorized access or modification of protected data.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85972","failure_patterns":"SEA-FM-003","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-85972","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85972"}
{"incident_id":"SEA-CVE-2026-85975","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affected connection.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85975","failure_patterns":"SEA-FM-012","capabilities":"auth.infrastructure_modification;data.credentials_secrets;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-85975","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-85975"}
{"incident_id":"SEA-CVE-2026-86063","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Git host that permits SHA-shaped branch names can create a branch named after the reviewed commit, causing checkout to select the branch tip and install attacker-controlled plugin code. Exploitation requires a user to install the malicious plugin and pin it to the ostensibly safe hash. This issue is fixed in version 2.1.179.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86063","failure_patterns":"SEA-FM-010","capabilities":"auth.financial_action;data.pii","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-86063","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-86063"}
{"incident_id":"SEA-CVE-2026-86717","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86717","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-86717","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-86717"}
{"incident_id":"SEA-CVE-2026-86787","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles and executes as PHP, allowing users with the Contributor role or above to run arbitrary PHP code on the server.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86787","failure_patterns":"","capabilities":"auth.code_execution;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-86787","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-86787"}
{"incident_id":"SEA-CVE-2026-86798","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page, allowing unauthenticated users to inject arbitrary web scripts that will execute in the browser of anyone visiting that page, including administrators.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86798","failure_patterns":"","capabilities":"auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-86798","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-86798"}
{"incident_id":"SEA-CVE-2026-86803","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86803","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-86803","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-86803"}
{"incident_id":"SEA-CVE-2026-86826","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive (database dump and site files, including credentials and secret keys) left behind by an interrupted restore.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86826","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-86826","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-86826"}
{"incident_id":"SEA-CVE-2026-86828","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86828","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-86828","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-86828"}
{"incident_id":"SEA-CVE-2026-87424","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87424","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-87424","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87424"}
{"incident_id":"SEA-CVE-2026-87661","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during service bring-up, leading to a persistent Denial of Service (DoS) of the administrative web interface.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87661","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-87661","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87661"}
{"incident_id":"SEA-CVE-2026-87664","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC) storage callbacks, the service accepts and registers session structures including administrative role permissions, user identifiers, and authorization flags—without verifying the identity or authenticity of the sending process. An attacker can obtain elevated administrative privileges on the web management interface without legitimate authentication.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87664","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-87664","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87664"}
{"incident_id":"SEA-CVE-2026-87665","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over IP (FCIP) circuits. An unauthenticated remote attacker can exploit this vulnerability by sending a single, specifically crafted UDP packet (Port 500) containing an oversized Nonce payload. Successful exploitation results in a denial of service (data-plane process crash)","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87665","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-87665","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87665"}
{"incident_id":"SEA-CVE-2026-87666","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values before processing them in underlying shell execution routines. An authenticated user with low-privilege administrative access can exploit this vulnerability by submitting a crafted timezone string containing shell metacharacters. Successful exploitation allows the attacker to escape the restricted management environment and execute arbitrary shell commands with elevated privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87666","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-87666","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87666"}
{"incident_id":"SEA-CVE-2026-87668","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary checks on the maximum array capacity. An authenticated user with administrative access can exploit this vulnerability by supplying a crafted diagnostic command string containing an excessive number of tokenized arguments. This leads to a memory overwrite resulting in a denial of service (process crash).","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87668","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-87668","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87668"}
{"incident_id":"SEA-CVE-2026-87669","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data across all logical switches. An attacker with low-privilege API access can leverage this endpoint to dump chassis-wide system health metrics, port performance violations, and configuration data without appropriate privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87669","failure_patterns":"SEA-FM-003","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-87669","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87669"}
{"incident_id":"SEA-CVE-2026-87671","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remote attacker can exploit this issue by sending a single, crafted HTTP request containing extreme numerical values in the query string. This causes an invalid memory dereference, resulting in a crash of the web management process (Denial of Service) and potential temporary management-plane disruption.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87671","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-87671","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87671"}
{"incident_id":"SEA-CVE-2026-87674","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allow an unprivileged local user to submit malformed logging configurations. Due to improper input sanitization during configuration file generation, an attacker can inject arbitrary directives that execute with elevated privileges when the logging service reloads, leading to local privilege escalation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87674","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-87674","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87674"}
{"incident_id":"SEA-CVE-2026-87676","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier (AKI) extension before copying string tokens into an internal memory buffer. An authenticated user with administrative privileges to import custom certificates can supply a certificate containing an intentionally oversized AKI extension. When the system processes or renders the certificate attributes, this can trigger a stack memory corruption leading to a denial-of-service (DoS) condition by crashing the management daemon.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87676","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-87676","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87676"}
{"incident_id":"SEA-CVE-2026-87678","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication (FA), the system fails to sanitize the Identity Provider (IdP) issuer parameter. An authenticated administrator—or an attacker capable of supplying crafted FA configuration files during an import routine—can inject arbitrary web server directives. This can lead to service denial by preventing the web management daemon from starting, or potentially alter web server security controls.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87678","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-87678","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87678"}
{"incident_id":"SEA-CVE-2026-87682","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during remote management connection validation and session verification for directory-based user accounts allow untrusted input containing shell metacharacters to reach internal system execution wrappers. An authenticated user or a compromised directory service account can exploit these vulnerabilities to execute arbitrary operating system commands with elevated privileges on the target device.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87682","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-87682","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87682"}
{"incident_id":"SEA-CVE-2026-87683","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads (such as device configuration attributes or port mapping requests) the REST API service fails to properly validate incoming array counts and string lengths against internal buffer capacities. An authenticated attacker with REST API access can transmit crafted, oversized request parameters to induce memory corruption on the execution stack. This may result in a denial-of-service condition (daemon crash) or potential arbitrary code execution within the management process context.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87683","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-87683","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87683"}
{"incident_id":"SEA-CVE-2026-87684","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly validating the length of the string. A remote, unauthenticated attacker (under default configuration) can exploit this vulnerability by sending a specially crafted SNMPv3 packet, leading to memory corruption, daemon crash (Denial of Service), or potential arbitrary code execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87684","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-87684","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87684"}
{"incident_id":"SEA-CVE-2026-87685","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file path parameter. An authenticated administrative user can exploit this issue by submitting a specially crafted status file parameter, causing the underlying process to move an arbitrary system file to a predictable, world-readable temporary directory. This can lead to persistent Denial of Service (DoS), critical system file destruction, host compromise, or sensitive data leakage.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87685","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-87685","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87685"}
{"incident_id":"SEA-CVE-2026-87688","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution in external system routines. An authenticated attacker with privileges to perform certificate deletion requests can leverage this flaw to execute arbitrary system commands with the privileges of the underlying management daemon. This vulnerability affects Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87688","failure_patterns":"","capabilities":"auth.destructive_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-87688","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87688"}
{"incident_id":"SEA-CVE-2026-87689","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet.","organization":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the update_credential (PUT) and delete_credentials (DELETE) handlers for /api/v1/credentials, which omit the authentication call entirely. Because these handlers call directly into lib/msf/core/db_manager/cred.rb, which performs no authorization check of its own, any client able to reach the web service on its default 0.0.0.0:8080 listener can read, modify, or permanently delete every stored credential record — including passwords, hashes, and private keys stored for a shared team engagement — without presenting any authentication. All published versions of Metasploit Framework through 6.5.4 are affected. The issue is fixed in 6.5.5 by adding warden.authenticate! as the first statement in both handlers, matching the pattern used by every other route in the API.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87689","failure_patterns":"SEA-FM-012","capabilities":"auth.destructive_action;auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-87689","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87689"}
{"incident_id":"SEA-CVE-2026-87690","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability (CWE-22).","organization":"The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the local destination path passed to client.fs.file.downloadfile(), with no sanitization. The underlying stdapi sink (lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb) writes to whatever path is supplied, so a listing entry such as ../../msfconsole.rc escapes the intended ~/.msf4/loot/<random> directory and overwrites ~/.msf4/msfconsole.rc, a resource file that every msfconsole invocation automatically executes at startup (lib/msf/ui/console/driver.rb project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the local destination path passed to client.fs.file.download_file(), with no sanitization. The underlying stdapi sink (lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb) writes to whatever path is supplied, so a listing entry such as ../../msfconsole.rc escapes the intended ~/.msf4/loot/<random> directory and overwrites ~/.msf4/msfconsole.rc, a resource file that every msfconsole invocation automatically executes at startup (lib/msf/ui/console/driver.rb:196). An attacker-controlled device that lures an operator into running this gather module achieves an arbitrary file write as the operator; because the written msfconsole.rc can load a second written file (a Ruby plugin whose top-level code runs on require), this converts into persistent code execution and an interactive shell as the operator (frequently root) on the pentester's workstation at the next console launch. The same traversal was previously fixed upstream in the recursive downloader (stdapi/fs/dir.rb scrubs separators); this module omitted the equivalent scrub. The fix applies the same separator scrub (or File.basename) to listing entries before building the local path.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87690","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-87690","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87690"}
{"incident_id":"SEA-CVE-2026-87692","evidence_tier":"security_advisory","title":"Software component issue could make the application process unsafe input","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87692","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Use schema-validated data formats: Parse untrusted input into plain data with an explicit schema; never deserialize into arbitrary types.","cve_references":"CVE-2026-87692","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87692"}
{"incident_id":"SEA-CVE-2026-87695","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87695","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-87695","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87695"}
{"incident_id":"SEA-CVE-2026-87696","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87696","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-87696","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87696"}
{"incident_id":"SEA-CVE-2026-87709","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87709","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-87709","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87709"}
{"incident_id":"SEA-CVE-2026-87710","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87710","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-87710","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87710"}
{"incident_id":"SEA-CVE-2026-87712","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87712","failure_patterns":"","capabilities":"arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-87712","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87712"}
{"incident_id":"SEA-CVE-2026-87726","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87726","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-87726","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87726"}
{"incident_id":"SEA-CVE-2026-87762","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where the secret key has never been set, allowing unauthenticated users to store arbitrary JavaScript that is executed in the browser of every site visitor.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87762","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-87762","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87762"}
{"incident_id":"SEA-CVE-2026-87764","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before outputting it back,…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before outputting it back, allowing unauthenticated users to store arbitrary web scripts that will execute in the session of any member who later views that conversation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87764","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-87764","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87764"}
{"incident_id":"SEA-CVE-2026-87765","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87765","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-87765","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87765"}
{"incident_id":"SEA-CVE-2026-87780","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87780","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-87780","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87780"}
{"incident_id":"SEA-CVE-2026-87781","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87781","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-87781","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87781"}
{"incident_id":"SEA-CVE-2026-87846","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's waybill-deletion request for those orders using the store's own stored API credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87846","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;auth.destructive_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-87846","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87846"}
{"incident_id":"SEA-CVE-2026-87855","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting an empty jtlauth parameter as a valid credential, combined with insufficient file type validation in handleImagePush(). This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87855","failure_patterns":"SEA-FM-002","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-87855","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87855"}
{"incident_id":"SEA-CVE-2026-87968","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visitor can force the store to re-register and overwrite the Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2's stored shop secret.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87968","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-87968","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87968"}
{"incident_id":"SEA-CVE-2026-87974","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and not verifying that the confirmed payment corresponds to the order it marks paid, allowing unauthenticated attackers to mark arbitrary orders as paid.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87974","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-87974","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-87974"}
{"incident_id":"SEA-CVE-2026-88072","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88072","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-88072","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88072"}
{"incident_id":"SEA-CVE-2026-88075","evidence_tier":"security_advisory","title":"configuration manager 2503 issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"configuration manager 2503 project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88075","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-88075","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88075"}
{"incident_id":"SEA-CVE-2026-88094","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88094","failure_patterns":"","capabilities":"auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-88094","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88094"}
{"incident_id":"SEA-CVE-2026-88096","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88096","failure_patterns":"SEA-FM-001;SEA-FM-008","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Idempotency and re-validation at execution: Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","cve_references":"CVE-2026-88096","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88096"}
{"incident_id":"SEA-CVE-2026-88106","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88106","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-88106","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88106"}
{"incident_id":"SEA-CVE-2026-88107","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88107","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-88107","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88107"}
{"incident_id":"SEA-CVE-2026-88127","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88127","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-88127","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88127"}
{"incident_id":"SEA-CVE-2026-88133","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88133","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-88133","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88133"}
{"incident_id":"SEA-CVE-2026-88146","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88146","failure_patterns":"SEA-FM-001;SEA-FM-008","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Idempotency and re-validation at execution: Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","cve_references":"CVE-2026-88146","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88146"}
{"incident_id":"SEA-CVE-2026-88152","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88152","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-88152","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88152"}
{"incident_id":"SEA-CVE-2026-88257","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised.","organization":"Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric bounds on the top-level arguments object only. Constraints inside nested objects and on array items (items, minItems, maxItems, minLength, maxLength, pattern, nested required, enum and additionalProperties project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric bounds on the top-level arguments object only. Constraints inside nested objects and on array items (items, minItems, maxItems, minLength, maxLength, pattern, nested required, enum and additionalProperties: false) were advertised by tools/list and never checked at tools/call or prompts/get, and keywords outside the enforced subset (oneOf, anyOf, $ref) were advertised and ignored. A host whose dispatch code relies on the schema it declared receives values the schema forbids, such as an out-of-range number or an undeclared key inside a nested object. What the host does with such a value decides the impact. This issue affects beam_mcp: from 0.1.0 before 0.10.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88257","failure_patterns":"SEA-FM-010","capabilities":"data.untrusted_external_text;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-88257","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88257"}
{"incident_id":"SEA-CVE-2026-88753","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service (DoS) via a crafted Markdown document.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88753","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-88753","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88753"}
{"incident_id":"SEA-CVE-2026-88755","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88755","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-88755","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88755"}
{"incident_id":"SEA-CVE-2026-88785","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled,…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN access logs to anyone able to read them.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88785","failure_patterns":"SEA-FM-012","capabilities":"auth.infrastructure_modification;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-88785","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88785"}
{"incident_id":"SEA-CVE-2026-88826","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator views the SmugMug Embed WordPress plugin through 3.13's settings screen.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88826","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-88826","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88826"}
{"incident_id":"SEA-CVE-2026-88827","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full privileges.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88827","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-88827","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88827"}
{"incident_id":"SEA-CVE-2026-88905","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious…","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious JavaScript that executes when an administrator opens the KeyWord Collector WordPress plugin through 1.4's settings page or when a visitor loads a page displaying its output.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88905","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-88905","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88905"}
{"incident_id":"SEA-CVE-2026-88930","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88930","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-88930","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88930"}
{"incident_id":"SEA-CVE-2026-88931","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own privileged endpoints.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88931","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-88931","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88931"}
{"incident_id":"SEA-CVE-2026-88964","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88964","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-88964","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-88964"}
{"incident_id":"SEA-CVE-2026-89073","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.","organization":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89073","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89073","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89073"}
{"incident_id":"SEA-CVE-2026-89076","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module).","organization":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89076","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89076","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89076"}
{"incident_id":"SEA-CVE-2026-89079","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords on multi-site setups in certain configurations.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89079","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-89079","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89079"}
{"incident_id":"SEA-CVE-2026-89097","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the aiwpfooterhook.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai_wp_footer_hook. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive data including the server's internal IP address, PHP configuration, WordPress and theme versions, hardening constants, the plugin's full block matrix, and all post meta values including underscore-prefixed protected keys such as API tokens and private integration state written by other plugins.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89097","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89097","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89097"}
{"incident_id":"SEA-CVE-2026-89105","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that should not be accepted, leading to a breach of security.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89105","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-89105","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89105"}
{"incident_id":"SEA-CVE-2026-89108","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the underlying Java application server. Successful exploitation could allow the attacker to gain administrative control over the underlying system, extending the impact beyond the vulnerable application. This results in a high impact on confidentiality, integrity and availability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89108","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89108","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89108"}
{"incident_id":"SEA-CVE-2026-89111","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89111","failure_patterns":"SEA-FM-002","capabilities":"data.credentials_secrets;data.cross_tenant_data;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-89111","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89111"}
{"incident_id":"SEA-CVE-2026-89112","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privileges could potentially access CLA signature records containing contributor information belonging to an organisation they are not authorized to administer.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89112","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89112","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89112"}
{"incident_id":"SEA-CVE-2026-89117","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user redirection. This results in a low impact on confidentiality and integrity. There is no impact on availability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89117","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89117","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89117"}
{"incident_id":"SEA-CVE-2026-89120","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests, resulting in high impact on integrity and low impact on confidentiality. There is no impact on availability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89120","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89120","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89120"}
{"incident_id":"SEA-CVE-2026-89140","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another…","organization":"Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace. The callback address temporal project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace. The callback address temporal://internal is reserved for callbacks that Scheduler V2 attaches to the Workflows it starts. In affected releases, any authenticated caller could attach a callback with that address to a Workflow start request, the address was exempt from the component.callbacks.allowedAddresses allowlist, and the History service delivered the callback to the component its token named, in whatever namespace that was, without authorizing the original caller there. When the forged completion matches an action a target schedule is running, the schedule records the action as completed while its Workflow still runs, which can defeat an overlap policy such as SKIP, and passes caller-controlled data to the next scheduled Workflow as its last completion result. A forged failure may also pause a schedule configured to pause on failure. A forgery requires the target namespace identifier, the schedule identifier, and the identity and timing of a running action. No disclosure of Workflow payloads or history was identified. Only namespaces that hold Scheduler V2 schedules can be targeted; Scheduler V2 is off by default, and existing Scheduler V2 schedules remain targets after the settings that create them are turned off.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89140","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89140","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89140"}
{"incident_id":"SEA-CVE-2026-89195","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89195","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89195","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89195"}
{"incident_id":"SEA-CVE-2026-89196","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89196","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89196","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89196"}
{"incident_id":"SEA-CVE-2026-89197","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89197","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89197","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89197"}
{"incident_id":"SEA-CVE-2026-89199","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89199","failure_patterns":"SEA-FM-012","capabilities":"auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-89199","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89199"}
{"incident_id":"SEA-CVE-2026-89200","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89200","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89200","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89200"}
{"incident_id":"SEA-CVE-2026-89201","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89201","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89201","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89201"}
{"incident_id":"SEA-CVE-2026-89202","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89202","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-89202","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89202"}
{"incident_id":"SEA-CVE-2026-89203","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89203","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89203","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89203"}
{"incident_id":"SEA-CVE-2026-89205","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89205","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89205","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89205"}
{"incident_id":"SEA-CVE-2026-89206","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89206","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89206","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89206"}
{"incident_id":"SEA-CVE-2026-89213","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89213","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89213","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89213"}
{"incident_id":"SEA-CVE-2026-89214","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89214","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89214","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89214"}
{"incident_id":"SEA-CVE-2026-89280","evidence_tier":"security_advisory","title":"The Dokan issue could expose accounts or credentials","summary":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1…","organization":"The Dokan project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with custom-level access and above, to change the WordPress account password of any customer who has placed at least one order with the attacking vendor, enabling login as that customer and resulting in a limited account takeover. Vendor-level access, required to exploit this vulnerability, can be self-registered through the public 'I am a vendor' registration flow when that option is enabled on the site.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89280","failure_patterns":"SEA-FM-012","capabilities":"auth.public_publication;data.pii;data.credentials_secrets","is_ai_system":true,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-89280","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89280"}
{"incident_id":"SEA-CVE-2026-89285","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89285","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89285","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89285"}
{"incident_id":"SEA-CVE-2026-89287","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89287","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89287","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89287"}
{"incident_id":"SEA-CVE-2026-89288","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89288","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89288","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89288"}
{"incident_id":"SEA-CVE-2026-89297","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89297","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89297","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89297"}
{"incident_id":"SEA-CVE-2026-89299","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89299","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89299","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89299"}
{"incident_id":"SEA-CVE-2026-89301","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the process function in all versions up to, and including, 4.7.13…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the process function in all versions up to, and including, 4.7.13 This makes it possible for unauthenticated attackers to delete arbitrary safe files on the server.. The public nonce (rtmedia_upload_nonce) is emitted into frontend JavaScript on any page rendering the rtMedia gallery or upload shortcode, making it retrievable by unauthenticated visitors without any prior authentication or privileged action.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89301","failure_patterns":"","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;auth.public_publication;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-89301","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89301"}
{"incident_id":"SEA-CVE-2026-89302","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89302","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89302","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89302"}
{"incident_id":"SEA-CVE-2026-89304","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL injection attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89304","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89304","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89304"}
{"incident_id":"SEA-CVE-2026-89305","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-11","date_basis":"","source_type":"cve_advisory","source_title":"The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injection attacks.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89305","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-89305","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89305"}
{"incident_id":"SEA-CVE-2026-89309","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The authorization middleware of the WMS MobileServer","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed without an authentication check. Second, for any HTTP method including GET and HEAD, a request carrying a malformed or non-bearer Authorization header is passed through without a valid token being required. The middleware does validate a token whenever a well-formed one is present, but in these two cases it does not require one. A remote attacker with network access to the service can therefore invoke API functionality without valid credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89309","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-89309","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-89309"}
{"incident_id":"SEA-CVE-2026-90530","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. RDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables RDS. The Lockdown Guide outlines the specific step to disable RDS if a ColdFusion server is not being used in Production Secure Profile.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90530","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-90530","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-90530"}
{"incident_id":"SEA-CVE-2026-90532","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90532","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-90532","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-90532"}
{"incident_id":"SEA-CVE-2026-90911","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90911","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-90911","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-90911"}
{"incident_id":"SEA-CVE-2026-90912","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90912","failure_patterns":"SEA-FM-006","capabilities":"arch.multi_tenant","is_ai_system":true,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-90912","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-90912"}
{"incident_id":"SEA-CVE-2026-90921","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90921","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-90921","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-90921"}
{"incident_id":"SEA-CVE-2026-91050","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2. This is due to the publicly reachable steps__start and steps__load_step routes accepting a params[presets][order_item_id] value that is copied verbatim into the booking object without verifying that the referenced order item belongs to the current customer, is a bundle item, is paid, or has remaining capacity — the is_bundle_scheduling() bundle discriminator is a mere !empty(order_item_id) truthiness check, and the code flow explicitly removes the customer and payment steps when this is truthy (the source even carries a TODO acknowledging the missing validation). This makes it possible for unauthenticated attackers to create approved appointments against other customers' order items and to read those customers' names, email addresses, and order codes returned in the booking confirmation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91050","failure_patterns":"SEA-FM-003","capabilities":"auth.financial_action;auth.destructive_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-91050","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-91050"}
{"incident_id":"SEA-CVE-2026-91136","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svgimage' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint.","organization":"The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svgimage' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback (SVGAnimatorController project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback (SVGAnimatorController::index_permission) returning true unconditionally combined with insufficient validation of the 'svg_image' input — sanitize_text_field() and esc_html() do not restrict filesystem paths, the file:// stream wrapper, or arbitrary URLs — before it is passed to file_get_contents() (with a wp_remote_get() fallback) and the raw response body is returned in the JSON 'html' field. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site's server which may make remote code execution possible.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91136","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;arch.async_job;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-91136","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-91136"}
{"incident_id":"SEA-CVE-2026-91184","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as…","organization":"Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as authbasic \"<realm>\";. A namespaced authenticated attacker that configures AuthenticationFilter CRD to an HTTPRoute/GRPCRoute on a shared Gateway can craft a realm value that closes the quoted directive and the enclosing location {} block and injects arbitrary NGINX directives into that Gateway's data-plane config. Impact A remote authenticated attacker can send crafted requests to configure NGINX Gateway Fabric AuthenticationFilter CRD and may be able to read every co-located tenant's mounted secrets, SSRF via proxypass, reading the pod ServiceAccount token, or hijacking other tenants' routes. There is no data plane exposure; this is a control plane issue only. Note project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as auth_basic \"<realm>\";. A namespaced authenticated attacker that configures AuthenticationFilter CRD to an HTTPRoute/GRPCRoute on a shared Gateway can craft a realm value that closes the quoted directive and the enclosing location {} block and injects arbitrary NGINX directives into that Gateway's data-plane config. Impact A remote authenticated attacker can send crafted requests to configure NGINX Gateway Fabric AuthenticationFilter CRD and may be able to read every co-located tenant's mounted secrets, SSRF via proxy_pass, reading the pod ServiceAccount token, or hijacking other tenants' routes. There is no data plane exposure; this is a control plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91184","failure_patterns":"SEA-FM-002","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-91184","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-91184"}
{"incident_id":"SEA-CVE-2026-91833","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks on installs where the payment key has not been configured.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91833","failure_patterns":"SEA-FM-002","capabilities":"auth.financial_action","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-91833","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-91833"}
{"incident_id":"SEA-CVE-2026-9191","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response,…","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response, and session state. An attacker able to execute code through an affected path could perform unauthorized actions or compromise an authenticated session.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9191","failure_patterns":"","capabilities":"auth.code_execution;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-9191","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-9191"}
{"incident_id":"SEA-CVE-2026-9209","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQueryServer PageMethod execute…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQuery_Server PageMethod execute caller-supplied SQL against the backing Sybase SQL Anywhere database using DBA/sysadmin privileges with no server-side authentication enforced beyond a client-side sessionStorage flag. Attackers can submit arbitrary SQL through these exposed endpoints to invoke xp_cmdshell and xp_read_file, achieving pre-authentication remote code execution as LocalSystem via a single HTTP request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9209","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-9209","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-9209"}
{"incident_id":"SEA-CVE-2026-92097","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetingsdialog() function building the {url} template…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() function building the {url} template placeholder from a sanitize_text_field()-filtered $_SERVER['REQUEST_URI'] on archive pages and then passing the substituted greeting content to do_shortcode() in the greetings-1 and greetings-2 templates, without stripping shortcode delimiters. Because wp_kses() runs against main_content BEFORE the {url} substitution, the attacker-controlled URL bytes reach do_shortcode() unfiltered. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes registered by WordPress core, the active theme, or any other plugin (e.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92097","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-92097","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92097"}
{"incident_id":"SEA-CVE-2026-92115","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action. This is due to insufficient shell escaping within the wppa_image_magick_a() function, where the attacker-controlled value parameter is concatenated raw — without escapeshellarg() — into an ImageMagick command string before being passed to exec(); further, wppa_decode() actively restores percent-encoded shell metacharacters (e.g., %26→&, %23→) rather than stripping them, allowing crafted payloads to survive sanitization and break out of the ImageMagick argument context. This makes it possible for authenticated attackers holding the plugin-defined wppa_upload capability to execute arbitrary operating-system commands as the web-server user, achieving full remote code execution on the underlying server. Exploitation requires ImageMagick to be enabled on the server; the wppa_upload capability is a plugin-level privilege that site administrators may grant to lower-privileged WordPress roles via the plugin's Users settings, broadening the pool of potential attackers beyond administrators.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92115","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-92115","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92115"}
{"incident_id":"SEA-CVE-2026-92426","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the requesting user before deleting post meta, allowing users with the Contributor role and above to delete arbitrary post meta from any post, including content owned by higher-privileged users.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92426","failure_patterns":"","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-92426","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92426"}
{"incident_id":"SEA-CVE-2026-92427","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing it to unauthenticated users and rendering the webhook's…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing it to unauthenticated users and rendering the webhook's signature check ineffective. This allows unauthenticated attackers to forge payment-confirmation notifications and record arbitrary donations as completed, with attacker-chosen amounts, donor names and messages.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92427","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;data.pii;data.credentials_secrets;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-92427","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92427"}
{"incident_id":"SEA-CVE-2026-92428","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including orders that were already paid or completed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92428","failure_patterns":"","capabilities":"auth.financial_action;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-92428","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92428"}
{"incident_id":"SEA-CVE-2026-92429","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and cancelling completed orders.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92429","failure_patterns":"","capabilities":"auth.financial_action;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-92429","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92429"}
{"incident_id":"SEA-CVE-2026-92553","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile function, as sanitize_file_name() does not strip executable extensions and no allow-list, MIME check, or safe-extension rename is applied. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The only server-side guard is a .htaccess file containing 'Require all denied' written by writeGuards(), which is silently ignored by nginx and by Apache configured with AllowOverride None, meaning RCE is fully achievable on those server configurations.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92553","failure_patterns":"SEA-FM-002","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-92553","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92553"}
{"incident_id":"SEA-CVE-2026-92681","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fields annotated with @cypher. Only @authentication directives placed directly on the individual fields are enforced. An application that exposes a top-level @cypher field and relies on schema-level or type-level @authentication to protect it allows unauthenticated callers to invoke the field and run the configured Cypher statement with the privileges of the GraphQL service account, which may permit reading and modifying data. Fixed in 7.6.4.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92681","failure_patterns":"","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-92681","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92681"}
{"incident_id":"SEA-CVE-2026-92682","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated to Cypher, so it behaves like some. A rule such as \"none of the related denied users matches the JWT subject\" therefore returns exactly the records it was meant to exclude, and excludes those it was meant to return. An authenticated user whom such a rule is meant to deny can read the protected records. This is also the case for mutations, so the impact is that sensitive data could also be created and deleted by users that shouldn't have access according to the typedefs. Fixed in 7.6.4.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92682","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-92682","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92682"}
{"incident_id":"SEA-CVE-2026-92766","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'srcby' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This makes it possible for unauthenticated attackers, or authenticated attackers holding any POS role (such as vtpos-cashier), to exploit the vulnerability, as the /vitepos/v1/vendor/list REST route's permission callback requires only a POS role assignment rather than any elevated WordPress capability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92766","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-92766","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92766"}
{"incident_id":"SEA-CVE-2026-92861","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Android application \"Ticket Ryutsu Center\" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92861","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-92861","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92861"}
{"incident_id":"SEA-CVE-2026-92876","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92876","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-92876","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92876"}
{"incident_id":"SEA-CVE-2026-92975","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the createsupportuser() function.","organization":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the createsupportuser() function. This is due to the function identifying the support account solely by matching against publicly hardcoded constants — userlogin 'groundhogg' and email addresses 'support@groundhogg.io' / 'help@groundhogg.io' — where the inarray() email-equality check at line 238 is not a security boundary because any user fully controls their own email value. This makes it possible for an attacker with an account whose userlogin is 'groundhogg' and whose useremail matches one of the hardcoded support constants to have that account silently promoted to administrator — and additionally to super admin on multisite when the triggering administrator holds managenetworkoptions — resulting in full site takeover. Exploitation requires a two-actor flow project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the create_support_user() function. This is due to the function identifying the support account solely by matching against publicly hardcoded constants — user_login 'groundhogg' and email addresses 'support@groundhogg.io' / 'help@groundhogg.io' — where the in_array() email-equality check at line 238 is not a security boundary because any user fully controls their own email value. This makes it possible for an attacker with an account whose user_login is 'groundhogg' and whose user_email matches one of the hardcoded support constants to have that account silently promoted to administrator — and additionally to super admin on multisite when the triggering administrator holds manage_network_options — resulting in full site takeover. Exploitation requires a two-actor flow: the attacker must first obtain or pre-plant an account with the hardcoded credentials (possible when open user registration is enabled or another account-creation path exists), after which a legitimate administrator must invoke the support-access feature via the submit_ticket or process_send_support_access entry points to trigger the promotion.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92975","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-92975","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92975"}
{"incident_id":"SEA-CVE-2026-92982","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressions to be executed within the operator pod. This can lead to arbitrary code execution and privilege escalation, granting the attacker control over the operator's service account with cluster-wide permissions.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92982","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.privileged_action;auth.infrastructure_modification;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-92982","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92982"}
{"incident_id":"SEA-CVE-2026-92990","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92990","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-92990","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-92990"}
{"incident_id":"SEA-CVE-2026-93017","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every…","organization":"The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The insights-operator-gather ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — therefore, access to every secret in every namespace in the cluster. Ref: https://github.com/openshift/insights-operator/blob/8f15e3157ff09f54ab22801f5b21da35a195cc6d/manifests/03-clusterrole.yamlL368-L373 - apiGroups: - \"\" resources: - secrets verbs: - get - list By spawning a pod with the gather service account mounted, an attacker will be able to access any secret in any namespace. spec: serviceAccountName:\"gather\"","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93017","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-93017","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93017"}
{"incident_id":"SEA-CVE-2026-93483","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header.","organization":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including administrators, without requiring a password. This grants full access to confidential data and system controls. More specifically, the HTTPBasicAuth modules for the agent (Kernel project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including administrators, without requiring a password. This grants full access to confidential data and system controls. More specifically, the HTTPBasicAuth modules for the agent (Kernel::System::Auth::HTTPBasicAuth) and customer (Kernel::System::CustomerAuth::HTTPBasicAuth) interfaces read the username to log in not only from $ENV{REMOTE_USER} (set by the web server after successful authentication), but also, as a fallback, from $ENV{HTTP_REMOTE_USER}, which is populated directly from an attacker-controllable \"Remote-User\" request header. On systems where HTTPBasicAuth was configured as the authentication backend, this allowed an attacker to log in as any existing user by sending a request with a forged Remote-User header, without providing any credentials.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93483","failure_patterns":"SEA-FM-003;SEA-FM-010","capabilities":"data.pii;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-93483","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93483"}
{"incident_id":"SEA-CVE-2026-93484","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement.","organization":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel::System::Ticket::TicketSearch and Kernel::System::Ticket::ArticleSearchIndex::DB via the ContentSearch parameter. The parameter is expected to be either \"AND\" or \"OR\", but its value was concatenated directly into the generated SQL query without validation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93484","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-93484","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93484"}
{"incident_id":"SEA-CVE-2026-93582","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment variable. In CGI and mod_perl based deployments, HTTP request headers may be mapped to corresponding HTTP_ environment variables. As a result, an unauthenticated remote attacker can supply a crafted Remote-User request header which is exposed to the application as HTTP_REMOTE_USER. When HTTP Basic Authentication is configured as the authentication backend, OTRS trusts this value as an already authenticated username and does not perform an additional password verification. An attacker may therefore authenticate through the Generic Interface as an existing agent or customer user without knowing the corresponding credentials. The resulting privileges depend on the account being impersonated. Successful exploitation may allow access to confidential information and modification of data or configuration with the permissions of the affected user. Exploitation requires HTTP Basic Authentication to be configured as an authentication backend and a web server environment in which attacker-controlled HTTP headers are exposed through the corresponding HTTP_ environment variables. OTRS 7 and later are not affected by this attack vector due to the use of Mojolicious/Hypnotoad and does not expose arbitrary request headers through %ENV in the manner required for exploitation. The supported REMOTE_USER mechanism additionally requires validation through the configured SSO shared secret. The unused HTTP_REMOTE_USER fallback has nevertheless been removed as a security-hardening measure. Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93582","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"auth.destructive_action;data.pii;data.credentials_secrets;arch.tool_enabled_agent;arch.content_ingestion_rag","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-93582","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93582"}
{"incident_id":"SEA-CVE-2026-93637","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without incrementing Zimbra’s source-IP failure counter. GraphQL aliases allow multiple authentication attempts in one HTTP request.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93637","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-93637","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93637"}
{"incident_id":"SEA-CVE-2026-93695","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account. This can result in remote code execution when an executable IIS-served directory is writable.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93695","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-93695","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93695"}
{"incident_id":"SEA-CVE-2026-93699","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93699","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-93699","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93699"}
{"incident_id":"SEA-CVE-2026-93746","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the 'email'…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the 'email' parameter of the guest print_document_from_the_mail_link handler dispatched from print_window() on init. This is due to the handler authorizing access to an order's printable documents when the attacker-supplied (base64-encoded) 'email' equals the order's billing email — a non-secret identifier — instead of requiring the WooCommerce order_key. This makes it possible for unauthenticated attackers, when the site is configured to allow guest access to documents ('wt_pklist_print_button_access_for' != 'logged_in'), to retrieve any other customer's invoice, packing slip, delivery note, dispatch label or shipping label — including customer name, billing/shipping address, phone number, purchased products, prices, taxes and invoice metadata — by knowing the target order ID and the associated billing email address.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93746","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;data.pii;data.credentials_secrets;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-93746","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93746"}
{"incident_id":"SEA-CVE-2026-93767","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. This vulnerability is exploitable only when the uploads/tainacan directory does not exist on the server, as this condition causes realpath() to return false, collapsing the base path to an empty string and rendering the containment check ineffective.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93767","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-93767","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93767"}
{"incident_id":"SEA-CVE-2026-93775","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injection is triggered by submitting a request to the Auphonic webhook endpoint with any POST body where the status_string field is not the literal string 'Done', causing the full raw POST superglobal to be stored in the plugin log before any authentication key validation is performed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93775","failure_patterns":"","capabilities":"data.pii;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-93775","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93775"}
{"incident_id":"SEA-CVE-2026-93860","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any holder of a valid Mistral token, regardless of assigned role, can read and change the service's cluster-wide maintenance state. Setting the state to PAUSED stops processing of new workflow and execution objects across all tenant projects until an operator restores it.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93860","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-93860","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93860"}
{"incident_id":"SEA-CVE-2026-93885","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dataobject Parameter in all versions up to, and including, 2.2.13 due to insufficient…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data_object Parameter in all versions up to, and including, 2.2.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable by unauthenticated attackers because the cdbbc_payment_verify AJAX action is registered under wp_ajax_nopriv_ and its only authentication gate — a nonce check — is bypassable, as the cdbbc_donation_box nonce is publicly exposed to anonymous visitors via the wallets_data JavaScript object emitted by the [crypto-donation-box] shortcode.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93885","failure_patterns":"","capabilities":"auth.financial_action;data.pii;data.financial_records","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-93885","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93885"}
{"incident_id":"SEA-CVE-2026-93892","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93892","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-93892","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93892"}
{"incident_id":"SEA-CVE-2026-93895","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93895","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-93895","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93895"}
{"incident_id":"SEA-CVE-2026-93907","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93907","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-93907","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93907"}
{"incident_id":"SEA-CVE-2026-93909","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93909","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-93909","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93909"}
{"incident_id":"SEA-CVE-2026-93953","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up to, and including, 1.5.8 due to insufficient escaping on the user supplied parameter and the lack of sufficient preparation on an existing SQL query. Backuply exports the Biographical Info value verbatim inside an INSERT statement written to the backup's SQL dump (wp_usermeta). When an Administrator later restores such a backup, the crafted payload breaks out of that INSERT statement and appends attacker-controlled SQL that executes with full database privileges. This makes it possible for authenticated attackers, with subscriber-level access and above, to write arbitrary data to the database — in particular to update the default_role option in wp_options to administrator (and enable open user registration) — so that a subsequently registered account is automatically granted the Administrator role, resulting in privilege escalation and full site takeover. Because the injection executes inside an INSERT during restore with no response returned to the attacker, the primitive is used to modify database records rather than to read existing data directly.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93953","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-93953","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-93953"}
{"incident_id":"SEA-CVE-2026-94134","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless hostkey is configured or nohostkeycheck is explicitly set to false, it accepts any server key.","organization":"The Apache Airflow SSH provider hook disables SSH host-key verification by default project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless host_key is configured or no_host_key_check is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An attacker in a machine-in-the-middle position between the worker and the SSH or SFTP server can impersonate the server and capture the credentials or data a task sends. Users of apache-airflow-providers-ssh and apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-ssh 7.0.0 and apache-airflow-providers-sftp 7.0.0 or later. The deferrable SFTP code paths had the same default and are covered separately by CVE-2026-94135; apache-airflow-providers-sftp 7.0.0 fixes both.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94134","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-94134","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94134"}
{"incident_id":"SEA-CVE-2026-94135","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The Apache Airflow SFTP provider's deferrable code paths (SFTPTrigger, SFTPHookAsync, SFTPClientPool) disable SSH host-key verification by default unless the connection explicitly sets nohostkeycheck to false.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The Apache Airflow SFTP provider's deferrable code paths (SFTPTrigger, SFTPHookAsync, SFTPClientPool) disable SSH host-key verification by default unless the connection explicitly sets no_host_key_check to false. Deployments that run SFTP sensors or operators in deferrable mode are affected. An attacker in a machine-in-the-middle position between the triggerer and the SFTP server can impersonate the server and capture the credentials or data exchanged. Users of apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-sftp 7.0.0 or later. This is a separate defect from CVE-2026-94134 (the synchronous SSH hook default, which also affects the SFTP hook); users who applied the fix for one also need this release for the other - apache-airflow-providers-sftp 7.0.0 fixes both.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94135","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-94135","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94135"}
{"incident_id":"SEA-CVE-2026-94197","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the ExternalAuth policy or Ingress external authentication.","organization":"An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the ExternalAuth policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and method headers are forwarded unsanitized into the internal authentication subrequest (handled by the NGINX authrequest directive). As a result, an unauthenticated, remote attacker may spoof request attributes evaluated by the external authentication provider. Impact project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the ExternalAuth policy or Ingress external authentication. Client-supplied X-Forwarded-Prefix, X-Forwarded-URI, X-Original-URI, and X-Forwarded-Method routing and method headers are forwarded unsanitized into the internal authentication subrequest (handled by the NGINX auth_request directive). As a result, an unauthenticated, remote attacker may spoof request attributes evaluated by the external authentication provider. Impact: This vulnerability may allow remote attackers unauthenticated access to protected paths. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94197","failure_patterns":"SEA-FM-003","capabilities":"auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-94197","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94197"}
{"incident_id":"SEA-CVE-2026-94200","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tlshandshake13, sslhandshake and tlsclientticketstore modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl…","organization":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tlshandshake13, sslhandshake and tlsclientticketstore modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. The TLS 1.3 client decodes the extensions of a NewSessionTicket message as if they came from EncryptedExtensions. It therefore accepts a 0-length earlydata extension, a form that is only valid in ClientHello and EncryptedExtensions. With {sessiontickets, auto}, the client stores the ticket in the node-global tlsclientticketstore. On the next automatic resumption, tlshandshake13 project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. The TLS 1.3 client decodes the extensions of a NewSessionTicket message as if they came from EncryptedExtensions. It therefore accepts a 0-length early_data extension, a form that is only valid in ClientHello and EncryptedExtensions. With {session_tickets, auto}, the client stores the ticket in the node-global tls_client_ticket_store. On the next automatic resumption, tls_handshake_1_3:get_max_early_data/1 crashes the store with a case_clause. Repeated crashes can exceed the restart intensity of the ssl supervisors, which use the rest_for_one strategy, and take down ssl for all connections on the node. This issue affects OTP from OTP 23.3 before OTP 27.3.4.19, OTP 28.5.0.8, and OTP 29.1.2, corresponding to ssl from 10.3 before 11.2.12.14, 11.6.0.7, and 11.7.8.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94200","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-94200","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94200"}
{"incident_id":"SEA-CVE-2026-94244","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user, such as a subscriber, to disclose all users' names, email addresses, roles, transaction amounts, payment methods and dates.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94244","failure_patterns":"","capabilities":"auth.financial_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-94244","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94244"}
{"incident_id":"SEA-CVE-2026-94258","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to other sites on that network. This affects multisite only, and requires the SMS Alert WordPress plugin before 4.0.1's gateway credentials to be stored on the acting administrator's own site.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94258","failure_patterns":"SEA-FM-012","capabilities":"auth.financial_action;auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-94258","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94258"}
{"incident_id":"SEA-CVE-2026-94260","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing unauthenticated attackers to write arbitrary payment…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing unauthenticated attackers to write arbitrary payment session metadata onto any order in the store and to force any order awaiting payment into a failed state.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94260","failure_patterns":"","capabilities":"auth.financial_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-94260","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94260"}
{"incident_id":"SEA-CVE-2026-94375","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8 via the getfilepath.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8 via the get_file_path. This makes it possible for unauthenticated attackers to extract download exported order CSV files containing customer PII — including names, billing and shipping addresses, email addresses, phone numbers, and order contents — directly over HTTP with no authentication. This is exploitable whenever the .htaccess and index.php guard files are absent from wp-content/webtoffee_export/, which can occur after any uninstall/reinstall cycle, migration, backup restore, or staging sync, since the export directory persists but its guard files do not; export filenames follow a fully deterministic second-precision timestamp pattern, making them brute-forceable across any suspected export window.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94375","failure_patterns":"","capabilities":"auth.financial_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-94375","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94375"}
{"incident_id":"SEA-CVE-2026-94377","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The authentication bypass is possible because ntav_check_data() uses loose != comparisons for signature verification, allowing a JSON body with boolean true values for idWebsite and sign to pass all checks on any configured installation.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94377","failure_patterns":"SEA-FM-003","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-94377","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94377"}
{"incident_id":"SEA-CVE-2026-94388","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94388","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-94388","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94388"}
{"incident_id":"SEA-CVE-2026-94451","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users.","organization":"Software component project","incident_date":"2026-10-12","date_basis":"","source_type":"cve_advisory","source_title":"Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access to or slow down the system by forcing the database to perform complex tasks, potentially causing a denial of service.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94451","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-94451","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94451"}
{"incident_id":"SEA-CVE-2026-94538","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to permanently delete any file managed by WP File Download, empty the entire trash, move files between categories, and publish or unpublish arbitrary files.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94538","failure_patterns":"SEA-FM-003","capabilities":"auth.destructive_action;auth.write_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-94538","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94538"}
{"incident_id":"SEA-CVE-2026-94575","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for the active session context, allowing access to restricted configuration settings intended exclusively for administrative roles.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94575","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-94575","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94575"}
{"incident_id":"SEA-CVE-2026-94578","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific Attributes (VSAs) or directory claims from an external identity provider (such as RADIUS, LDAP, TACACS+, or Federated IDP), an account can bypass administrative role restriction checks during session establishment.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94578","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-94578","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94578"}
{"incident_id":"SEA-CVE-2026-94579","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user authenticating via an external directory or AAA service whose username or profile identifier contains shell metacharacters can trigger arbitrary command execution with root privileges when their remote SSH session closes.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94579","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-94579","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94579"}
{"incident_id":"SEA-CVE-2026-94581","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to…","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with administrative privileges to configure SSH known host settings can supply specially crafted parameter values containing shell metacharacters to trigger command execution on the host system.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94581","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-94581","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94581"}
{"incident_id":"SEA-CVE-2026-94582","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly accessible via standard user interfaces or CLI management commands, an input processing flaw allows incoming or internally routed diagnostic state payloads to exceed allocated memory boundaries. An attacker that is able to chain or link other vulnerabilities to exploit this internal diagnostic could cause a heap- or stack-based memory overrun, resulting in a daemon crash (Denial of Service) or potential arbitrary code execution within the context of the routing daemon.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94582","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-94582","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94582"}
{"incident_id":"SEA-CVE-2026-94583","evidence_tier":"security_advisory","title":"Software component issue could cause actions to run with inconsistent state","summary":"A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incoming network management FCIP requests, a timing window exists between when a request populates the address variable and when the service constructs and returns the response context. As a result, the first request adopts the modified context, causing the service to return sensitive management details or configuration data belonging to the second context back to the original requester.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94583","failure_patterns":"SEA-FM-001;SEA-FM-008","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Idempotency and re-validation at execution: Attach idempotency keys to mutations and re-verify state and permissions atomically when the action runs.","cve_references":"CVE-2026-94583","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94583"}
{"incident_id":"SEA-CVE-2026-94585","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94585","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-94585","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94585"}
{"incident_id":"SEA-CVE-2026-94589","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7submit function.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.4.5 via the extcf7_submit function. This is due to missing file extension, MIME type, and size validation in the signature field's validation_filter(), combined with the absence of PHP-execution guards in the upload directory and a sanitize_file_name() bypass that converts shell.php- into shell.php. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94589","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-94589","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94589"}
{"incident_id":"SEA-CVE-2026-94663","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94663","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-94663","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-94663"}
{"incident_id":"SEA-CVE-2026-95114","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95114","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95114","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95114"}
{"incident_id":"SEA-CVE-2026-95115","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95115","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95115","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95115"}
{"incident_id":"SEA-CVE-2026-95116","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95116","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95116","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95116"}
{"incident_id":"SEA-CVE-2026-95117","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95117","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95117","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95117"}
{"incident_id":"SEA-CVE-2026-95122","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95122","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95122","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95122"}
{"incident_id":"SEA-CVE-2026-95124","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95124","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95124","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95124"}
{"incident_id":"SEA-CVE-2026-95127","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95127","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95127","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95127"}
{"incident_id":"SEA-CVE-2026-95155","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95155","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95155","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95155"}
{"incident_id":"SEA-CVE-2026-95179","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95179","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95179","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95179"}
{"incident_id":"SEA-CVE-2026-95184","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95184","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95184","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95184"}
{"incident_id":"SEA-CVE-2026-95208","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS clients.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95208","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95208","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95208"}
{"incident_id":"SEA-CVE-2026-95209","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95209","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95209","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95209"}
{"incident_id":"SEA-CVE-2026-95589","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95589","failure_patterns":"SEA-FM-003","capabilities":"auth.financial_action;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-95589","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95589"}
{"incident_id":"SEA-CVE-2026-95599","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95599","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-95599","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95599"}
{"incident_id":"SEA-CVE-2026-95610","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95610","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-95610","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95610"}
{"incident_id":"SEA-CVE-2026-95634","evidence_tier":"security_advisory","title":"Software component issue could reach internal services","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95634","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-95634","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95634"}
{"incident_id":"SEA-CVE-2026-95640","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95640","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95640","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95640"}
{"incident_id":"SEA-CVE-2026-95680","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95680","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-95680","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95680"}
{"incident_id":"SEA-CVE-2026-95686","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The ingest endpoint is gated only by a nonce that is publicly emitted to every anonymous visitor on tracked pages via optiBehaviorHeatmapConfig.nonce, meaning no account or authentication of any kind is required to write the malicious payload.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95686","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-95686","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95686"}
{"incident_id":"SEA-CVE-2026-95695","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95695","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-95695","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95695"}
{"incident_id":"SEA-CVE-2026-95696","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95696","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-95696","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95696"}
{"incident_id":"SEA-CVE-2026-95808","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up to, and including, 1.15.48 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The nonce required to reach the vulnerable handler is emitted to every public page that renders a form, making it trivially obtainable by an unauthenticated attacker from page source.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95808","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-95808","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95808"}
{"incident_id":"SEA-CVE-2026-95809","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'countryname' Location Parameter in all…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'country_name' Location Parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The heatmap recording endpoint accepts unauthenticated requests protected only by a nonce that any visitor can freely obtain via the public opti_behavior_refresh_nonces AJAX action, removing any practical barrier to injecting the malicious payload.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95809","failure_patterns":"","capabilities":"auth.destructive_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-95809","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95809"}
{"incident_id":"SEA-CVE-2026-95816","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce check protecting the rednao_smart_forms_save_form_values AJAX handler is only enforced when the smart_forms_block_anonymous_submissions option is enabled, meaning default installations require no authentication or nonce verification whatsoever to submit and store malicious payloads.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95816","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-95816","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95816"}
{"incident_id":"SEA-CVE-2026-95943","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95943","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-95943","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-95943"}
{"incident_id":"SEA-CVE-2026-96183","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96183","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96183","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96183"}
{"incident_id":"SEA-CVE-2026-96278","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUESTURI Session History in all versions up to, and including, 9.3.03.002 due to insufficient input sanitization and output…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and including, 9.3.03.002 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The bypass works because esc_url_raw() strips literal angle brackets but retains HTML entities, which wppaEntityDecode() silently converts back to live HTML tags before jQuery('wppa-modal-container').html() renders them.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96278","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96278","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96278"}
{"incident_id":"SEA-CVE-2026-96316","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96316","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-96316","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96316"}
{"incident_id":"SEA-CVE-2026-96327","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplmsplugin allows Blind SQL Injection.This issue affects WPLMS project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96327","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-96327","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96327"}
{"incident_id":"SEA-CVE-2026-96331","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96331","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-96331","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96331"}
{"incident_id":"SEA-CVE-2026-96542","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\\SYSTEM by modifying the EAAntiCheatService service configuration and executable path. This vulnerability requires non-standard manual execution of the standalone installer and does not affect standard game installations via the EA App and Steam. This issue is corrected in version 1.0.14940699 and later; service permissions automatically self-heal upon launching an integrated EA game title.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96542","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96542","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96542"}
{"incident_id":"SEA-CVE-2026-96558","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsmhiddenquestions' parameter in all versions up to, and including, 11.2.6…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsm_hidden_questions' parameter in all versions up to, and including, 11.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the attacker to force the mlw_results INSERT to fail by submitting an over-length or duplicate qsm_unique_key value, which triggers the audit trail code branch that writes the unescaped payload to wp_mlw_qm_audit_trail.form_data.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96558","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96558","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96558"}
{"incident_id":"SEA-CVE-2026-96562","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1.","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Exploitation requires that a submitted comment containing the shortcode payload in an href or src attribute is approved through the site's normal comment moderation workflow; once approved, the shortcode is executed automatically via WP-Cron without any further attacker interaction.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96562","failure_patterns":"SEA-FM-002","capabilities":"data.pii;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-96562","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96562"}
{"incident_id":"SEA-CVE-2026-96570","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswpreviewtext' parameter in all versions up to, and including, 1.67 due to insufficient input…","organization":"Software component project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce that serves as the only authorization gate is publicly printed in the [saswp-reviews-form] shortcode HTML, making it obtainable by any anonymous visitor and rendering it ineffective as an access control boundary.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96570","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-96570","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96570"}
{"incident_id":"SEA-CVE-2026-96596","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erltar module), hexpm hexcore (hexerltar module), hexpm hex (mixhexerltar module) and erlang rebar3 (r3hexerltar module) allows…","organization":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erltar module), hexpm hexcore (hexerltar module), hexpm hex (mixhexerltar module) and erlang rebar3 (r3hexerltar module) allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU sparse member. When erltar project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (r3_hex_erl_tar module) allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU sparse member. When erl_tar:extract/1,2 writes a member to disk, erl_tar:stream_to_file_loop/3 reads it in chunks of 65536 bytes by default. For a GNU sparse member whose sparse map ends before its real size, erl_tar:do_sparse_read/3 matches its trailing-hole clause before its zero-length clause. After the chunk is used up, the trailing-hole clause reads zero bytes, does not advance the position, and recurses forever. A 2048-byte archive keeps the extracting process and one scheduler busy until the process is killed. The {max_size, N} option prevents this only when N is below the real size of the member. Extraction with the memory option is not affected. hex_core ships its own copy of erl_tar as hex_erl_tar, and Hex and rebar3 ship hex_core with prefixed module names (mix_hex_erl_tar and r3_hex_erl_tar). These copies contain the same code and do not call stdlib's erl_tar, so they are affected on any OTP version. OTP 28 is not affected, but an application running on OTP 28 is affected if it extracts archives through an affected version of hex_core, Hex or rebar3. This issue affects OTP from OTP 29.0 before OTP 29.1.2, corresponding to stdlib from 8.0 before 8.1.1, and rebar3 from 3.27.1 onward, and hex from 2.4.2 before 2.5.3; hex_core: from 0.14.0 before 0.20.1.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96596","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-96596","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96596"}
{"incident_id":"SEA-CVE-2026-96614","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"\"ゲオアプリ\" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96614","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-96614","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96614"}
{"incident_id":"SEA-CVE-2026-96615","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"NGINX Gateway Fabric has a vulnerability when it is configured with Gateway","organization":"Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent. A namespaced authenticated attacker with access to a service account may impersonate the authenticated NGINX Agent gRPC connection to read TLS private keys of Gateway deployments in another namespace. Impact A remote authenticated attacker may be able to read TLS private keys of Gateway deployments in another namespace. There is no data plane exposure; this is a control plane issue only. Note project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent. A namespaced authenticated attacker with access to a service account may impersonate the authenticated NGINX Agent gRPC connection to read TLS private keys of Gateway deployments in another namespace. Impact A remote authenticated attacker may be able to read TLS private keys of Gateway deployments in another namespace. There is no data plane exposure; this is a control plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96615","failure_patterns":"SEA-FM-010","capabilities":"data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96615","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96615"}
{"incident_id":"SEA-CVE-2026-96648","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is only exploitable by Subscriber-level users when an administrator has added their role to the plugin's 'access_roles' setting, which is a documented and explicitly supported plugin feature that grants lower-privileged users access to the dtgs_nonce required to reach the vulnerable updateRows action handler.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96648","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96648","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96648"}
{"incident_id":"SEA-CVE-2026-96653","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'displayname' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user…","organization":"The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'displayname' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a second-order injection project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a second-order injection: a Subscriber stores a display_name containing a single quote via their own profile, which WordPress preserves verbatim; the payload is then triggered when WdkCachedUserEditor::update_listings_user_editor() re-reads that stored value and passes it unsanitized to the SQL sink.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96653","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-96653","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96653"}
{"incident_id":"SEA-CVE-2026-96661","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmediain' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The unauthenticated mobile app endpoint dispatches the library action without validating the Mobile App feature flag, a nonce, or any WordPress authentication, meaning no account or session of any kind is required to exploit this vulnerability.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96661","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-96661","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96661"}
{"incident_id":"SEA-CVE-2026-96662","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[serviceid]' Parameter in all versions up to, and including, 5.7.2…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[service_id]' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96662","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-96662","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96662"}
{"incident_id":"SEA-CVE-2026-96667","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'firstname' parameter in all versions up to, and including, 7.3 due to…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The reCAPTCHA check is trivially bypassed by omitting the g-recaptcha-response parameter entirely, since validation only runs when that parameter is present.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96667","failure_patterns":"SEA-FM-010","capabilities":"data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96667","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96667"}
{"incident_id":"SEA-CVE-2026-96765","evidence_tier":"security_advisory","title":"Software component issue could run attacker-controlled scripts in a browser","summary":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'idtoken' parameter in all versions up to, and including, 44.1 due to…","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter in all versions up to, and including, 44.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The payload is stored in the wpo365_errors transient for up to three days by submitting a crafted unauthenticated request with a forged id_token whose base64url-decoded unique_name or iss claim contains malicious HTML, requiring no prior authentication or user interaction beyond an administrator later visiting the WPO365 wizard page.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96765","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96765","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96765"}
{"incident_id":"SEA-CVE-2026-96806","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user…","organization":"The Apache Airflow Keycloak auth manager did not end the session on logout project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user stayed logged in. Deployments using the Keycloak auth manager are affected: after a user logs out, anyone with later access to the same browser (for example on a shared workstation) can continue to act as that user. Users of apache-airflow-providers-keycloak are recommended to upgrade to apache-airflow-providers-keycloak 0.11.1 or later.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96806","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96806","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96806"}
{"incident_id":"SEA-CVE-2026-96893","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject…","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to inject specially crafted content into AI agent instructions, potentially causing unintended command execution attributed to other users, due to improper neutralization of special elements in AI conversation context construction.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96893","failure_patterns":"SEA-FM-010","capabilities":"data.pii;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96893","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-96893"}
{"incident_id":"SEA-CVE-2026-97334","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97334","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-97334","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97334"}
{"incident_id":"SEA-CVE-2026-97348","evidence_tier":"security_advisory","title":"Software component issue could expose restricted files","summary":"The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the getinstancecss function.","organization":"Software component project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get_instance_css function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. The widget's normal update()/sanitize_field_input() pipeline — which would reject non-hex color values — is bypassed entirely because the [siteorigin_widget] shortcode handler calls $the_widget->widget() directly on the attacker-supplied decoded JSON instance.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97348","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-97348","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97348"}
{"incident_id":"SEA-CVE-2026-97468","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that…","organization":"Software component project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode()), and treated a cache hit as proof that the presented token had already been validated. An attacker could craft a token (for example a UsernameToken or a self-signed SAML Assertion) whose hash collides with a cached entry. The token would then be accepted without password validation, signature trust verification or a call to the STS. This could let the attacker authenticate as another user and, through STS token validation or renewal, obtain STS-signed tokens for that identity. Users are recommended to upgrade to versions 4.2.4 or 4.1.9 or 3.6.13, which fix this issue.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97468","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-97468","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97468"}
{"incident_id":"SEA-CVE-2026-97629","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"When NGINX Plus or NGINX Open Source is configured with sslsessioncache","organization":"Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates. Impact This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97629","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-97629","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97629"}
{"incident_id":"SEA-CVE-2026-97665","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a…","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds read and browse privileges across all repositories by default, so this precondition can also be met without an authenticated account.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97665","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-97665","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97665"}
{"incident_id":"SEA-CVE-2026-97666","evidence_tier":"security_advisory","title":"Software component issue could allow unintended commands to run","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97666","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-97666","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97666"}
{"incident_id":"SEA-CVE-2026-97667","evidence_tier":"security_advisory","title":"Software component issue could expose accounts or credentials","summary":"Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package.","organization":"Software component project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permissions of the viewing user. In this description, a user account means an account that has supplied valid credentials. The anonymous user, if enabled, is also a user account and can hold this permission if an administrator grants it.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97667","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-97667","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97667"}
{"incident_id":"SEA-CVE-2026-97668","evidence_tier":"security_advisory","title":"Software component issue could expose or alter stored data","summary":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent metavalue in all versions up to, and including, 10.8.0 due to insufficient escaping on user…","organization":"Software component project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparation on the existing SQL query in the update_guest_persistent_cart() function. The abandoned_cart_info value, populated from attacker-controlled checkout fields such as the SMS consent field, is passed through stripslashes() and concatenated directly into an UPDATE statement while the adjacent SELECT and INSERT use prepared statements. This makes it possible for unauthenticated attackers to append additional SQL to the query. Because the sink is an UPDATE ... SET on the wp_usermeta table, the injection can both extract sensitive information from the database via time-based blind techniques and modify usermeta rows; it has been demonstrated to escalate an arbitrary account to administrator by writing a wp_capabilities row that shadows the legitimate one.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97668","failure_patterns":"SEA-FM-002","capabilities":"auth.financial_action;auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-97668","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97668"}
{"incident_id":"SEA-CVE-2026-97670","evidence_tier":"security_advisory","title":"Software component issue could allow unauthorized access","summary":"The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1.","organization":"The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying authorization before dispatching a WordPress action hook whose name is taken from an attacker-supplied form-field value (via the notification emailmessage [field] placeholder and the {actionhook,...} dynamic-data token; the 3.16.1 trust gate iscontentrequestsupplied() only inspects $POST['args']/$GET['args'], never the $POST['formData'] the public form-submit endpoint parses). This makes it possible for unauthenticated attackers to invoke arbitrary WordPress action hooks (multiple per request), causing state changes up to permanent, irreversible destruction of site content project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying authorization before dispatching a WordPress action hook whose name is taken from an attacker-supplied form-field value (via the notification email_message [field] placeholder and the {action_hook,...} dynamic-data token; the 3.16.1 trust gate is_content_request_supplied() only inspects $_POST['args']/$_GET['args'], never the $_POST['formData'] the public form-submit endpoint parses). This makes it possible for unauthenticated attackers to invoke arbitrary WordPress action hooks (multiple per request), causing state changes up to permanent, irreversible destruction of site content: a verified unauthenticated request permanently deleted trashed posts, pages, and comments via the core wp_scheduled_delete action. Other non-deny-listed hooks extend the impact to denial of service (e.g. wp_maybe_auto_update) and, where vulnerable third-party handlers are installed, further privileged writes. The same unauthenticated dynamic-data pipeline additionally exposes a blind arbitrary user/post-meta read; the read result is delivered only to the site owner and is not attacker-exfiltrable through the plugin's own email/response paths. Exploitation requires a published Avada form with AJAX submission and a notification whose email_message template includes an [all_fields] or explicit [field] placeholder - the default form configuration.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97670","failure_patterns":"SEA-FM-003","capabilities":"auth.code_execution;auth.destructive_action;auth.privileged_action;auth.write_action;auth.public_publication;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-97670","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97670"}
{"incident_id":"SEA-CVE-2026-97799","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97799","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-97799","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97799"}
{"incident_id":"SEA-CVE-2026-97812","evidence_tier":"security_advisory","title":"Security issue reported in Software component","summary":"A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.","organization":"Software component project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97812","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-97812","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97812"}
{"incident_id":"SEA-CVE-2026-97853","evidence_tier":"security_advisory","title":"Software component issue could make the service unavailable","summary":"Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service.","organization":"Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision (34 digits by default) is applied, so its cost grows with the places argument instead of with the size of the result. For positive places it appends places zero digits to the coefficient as a charlist before converting it to an integer, and for negative places it builds a charlist of -places zero digits. A single call such as Decimal.round(Decimal.new(\"1.5\"), -50000000) allocates about 5.5 GB of memory, which can exhaust available memory and get the BEAM VM killed. The oldest releases instead loop once per decimal place, consuming CPU in proportion to places. Any application that passes a user-supplied number of decimal places or scale to Decimal.round/2 or Decimal.round/3 without bounding it is exposed. The input limits added for CVE-2026-32686 do not cover the places argument. This issue affects decimal project","incident_date":"2026-10-10","date_basis":"","source_type":"cve_advisory","source_title":"Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision (34 digits by default) is applied, so its cost grows with the places argument instead of with the size of the result. For positive places it appends places zero digits to the coefficient as a charlist before converting it to an integer, and for negative places it builds a charlist of -places zero digits. A single call such as Decimal.round(Decimal.new(\"1.5\"), -50_000_000) allocates about 5.5 GB of memory, which can exhaust available memory and get the BEAM VM killed. The oldest releases instead loop once per decimal place, consuming CPU in proportion to places. Any application that passes a user-supplied number of decimal places or scale to Decimal.round/2 or Decimal.round/3 without bounding it is exposed. The input limits added for CVE-2026-32686 do not cover the places argument. This issue affects decimal: from 0.1.0 before 3.1.2.","source_publisher":"National Vulnerability Database","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97853","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-97853","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-CVE-2026-97853"}
{"incident_id":"SEA-GHSA-24cc-9352-h2pg","evidence_tier":"security_advisory","title":"Security issue reported in tinytag","summary":"An M4A file containing a sub-atom with a size of zero in the ---- atom makes the parser enter an infinite loop, resulting in a denial-of-service for programs reading such files with tinytag.","organization":"tinytag project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"tinytag: Infinite loop when parsing certain M4A files containing invalid atoms","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-24cc-9352-h2pg","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-104266","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-24cc-9352-h2pg"}
{"incident_id":"SEA-GHSA-29r9-67vg-qj56","evidence_tier":"security_advisory","title":"Security issue reported in praisonaiagents","summary":"PraisonAI gates dangerous tools (file writes, deletes, shell/code execution) behind an interactive approval prompt. The first approval of a tool is cached for the remainder of the run and silently reused for all later…","organization":"praisonaiagents project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-29r9-67vg-qj56","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-60087","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-29r9-67vg-qj56"}
{"incident_id":"SEA-GHSA-2cvf-wqm6-wr9g","evidence_tier":"security_advisory","title":"Security issue reported in github.com/containers/podman","summary":"Podman v4.4.0 added a feature where container checkpoints (from the podman container checkpoint command) could be distributed via OCI registry, and pulled from that registry and run via the podman run command.","organization":"github.com/containers/podman project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-2cvf-wqm6-wr9g","failure_patterns":"","capabilities":"arch.distributed_tx","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-94603","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-2cvf-wqm6-wr9g"}
{"incident_id":"SEA-GHSA-2fmv-rv2c-59x7","evidence_tier":"security_advisory","title":"System.Security.Cryptography.Pkcs issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Pkcs.","organization":"System.Security.Cryptography.Pkcs project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-2fmv-rv2c-59x7","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-70162","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-2fmv-rv2c-59x7"}
{"incident_id":"SEA-GHSA-2j4c-ffch-9f23","evidence_tier":"security_advisory","title":"Security issue reported in github.com/xuri/excelize/v2","summary":"Any file whose first 8 bytes are the OLE compound-file signature (D0 CF 11 E0 A1 B1 1A E1) is routed by OpenFile/OpenReader/OpenBytes → openReaderAt → Decrypt.","organization":"github.com/xuri/excelize/v2 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-2j4c-ffch-9f23","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107214","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-2j4c-ffch-9f23"}
{"incident_id":"SEA-GHSA-2j93-m82w-73j2","evidence_tier":"security_advisory","title":"Microsoft.NETCore.App.Runtime.linux-arm issue could grant elevated privileges","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.NETCore.App.Runtime; System.Private.CoreLib.","organization":"Microsoft.NETCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-2j93-m82w-73j2","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-96231","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-2j93-m82w-73j2"}
{"incident_id":"SEA-GHSA-2jwh-9rmr-j4xf","evidence_tier":"security_advisory","title":"Security issue reported in org.asynchttpclient:async-http-client","summary":"With the cookie store enabled, which is the default, a Cookie header that the caller sets on a request with setHeader or addHeader is thrown away whenever the store holds any cookie for the request's origin: the…","organization":"org.asynchttpclient:async-http-client project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-2jwh-9rmr-j4xf","failure_patterns":"","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107228","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-2jwh-9rmr-j4xf"}
{"incident_id":"SEA-GHSA-2mwr-xjcg-37j7","evidence_tier":"security_advisory","title":"mechanize issue could expose accounts or credentials","summary":"mechanize leaked credentials to the redirect target when an HTTP redirect crossed to another host. Credentials set through Mechanizerequestheaders= leaked even when they were Authorization.","organization":"mechanize project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Mechanize sends credential headers to another host after an HTTP redirect","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-2mwr-xjcg-37j7","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107715","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-2mwr-xjcg-37j7"}
{"incident_id":"SEA-GHSA-2v95-h47v-g4x9","evidence_tier":"security_advisory","title":"indico issue could reach internal services","summary":"Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part of Indico's functionality, but of course it is never intended to let you access \"special\" targets such as…","organization":"indico project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Indico: Incomplete Server-Side Request Forgery (SSRF) check","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-2v95-h47v-g4x9","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-107394","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-2v95-h47v-g4x9"}
{"incident_id":"SEA-GHSA-2vc4-c4r6-p6v6","evidence_tier":"security_advisory","title":"Security issue reported in @opennextjs/cloudflare","summary":"When cache interception is enabled, @opennextjs/cloudflare can interpret percent-encoded paths differently during middleware matching and cache lookup.","organization":"@opennextjs/cloudflare project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-2vc4-c4r6-p6v6","failure_patterns":"","capabilities":"auth.infrastructure_modification;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-100409","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-2vc4-c4r6-p6v6"}
{"incident_id":"SEA-GHSA-2x6f-rp82-ppmj","evidence_tier":"security_advisory","title":"Security issue reported in nuxt-og-image","summary":"Description: Due to the specifics of caching and key generation in the Open Graph image cache created by the module, an unauthenticated attacker can modify the content of the image (for example, the title parameter) that…","organization":"nuxt-og-image project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-2x6f-rp82-ppmj","failure_patterns":"","capabilities":"auth.write_action;data.pii;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-102527","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-2x6f-rp82-ppmj"}
{"incident_id":"SEA-GHSA-2xv2-w8cq-5gxw","evidence_tier":"security_advisory","title":"praisonaiagents issue could expose accounts or credentials","summary":"CodeAgent.executepython() executes LLM-generated Python code in a subprocess with the complete parent-process environment (os.environ.copy()), zero AST validation, zero import restrictions, and no sandbox enforcement —…","organization":"praisonaiagents project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-2xv2-w8cq-5gxw","failure_patterns":"SEA-FM-012","capabilities":"auth.code_execution;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-61447","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-2xv2-w8cq-5gxw"}
{"incident_id":"SEA-GHSA-322m-ff4g-9vx9","evidence_tier":"security_advisory","title":"ghost issue could reach internal services","summary":"A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network.","organization":"ghost project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"Ghost: Server-Side Request Forgery in Bookmark Fetching","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-322m-ff4g-9vx9","failure_patterns":"SEA-FM-002","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-105647","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-322m-ff4g-9vx9"}
{"incident_id":"SEA-GHSA-32r8-5843-4qw2","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"Vikunja's web.Auth interface (pkg/web/web.go, single method GetID() int64) is satisfied by BOTH user.User and models.LinkSharing.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-32r8-5843-4qw2","failure_patterns":"","capabilities":"auth.destructive_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-76216","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-32r8-5843-4qw2"}
{"incident_id":"SEA-GHSA-334f-vvp4-7g6p","evidence_tier":"security_advisory","title":"Microsoft.AspNetCore.SignalR.Common issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Common and Microsoft.AspNetCore.SignalR.Core.","organization":"Microsoft.AspNetCore.SignalR.Common project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-334f-vvp4-7g6p","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-70159","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-334f-vvp4-7g6p"}
{"incident_id":"SEA-GHSA-3gh4-cghq-f8v4","evidence_tier":"security_advisory","title":"Security issue reported in pydantic-ai","summary":"Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettings(includecontent=False) to exclude message content — user prompts, model completions, tool call arguments and responses — from exported…","organization":"pydantic-ai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when include_content=False","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-3gh4-cghq-f8v4","failure_patterns":"SEA-FM-010","capabilities":"data.pii;data.untrusted_external_text;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107293","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-3gh4-cghq-f8v4"}
{"incident_id":"SEA-GHSA-3hc7-r24j-rpwc","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"Vikunja lets a task in one project have a subtask that lives in a different project. When listing a project's tasks, an option pulls in those subtasks (?expand%5B%5D=subtasks).","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Cross-project task disclosure through subtask expansion","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-3hc7-r24j-rpwc","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-3hc7-r24j-rpwc"}
{"incident_id":"SEA-GHSA-3hcj-9m7p-wwm9","evidence_tier":"security_advisory","title":"Security issue reported in github.com/gotify/server/v2","summary":"The password change endpoint (POST /current/user/password) in Gotify versions <= 2.9.1 does not require knowledge of the current password.","organization":"github.com/gotify/server/v2 project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Gotify: Insufficiently Protected Password Change endpoint","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-3hcj-9m7p-wwm9","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-102603","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-3hcj-9m7p-wwm9"}
{"incident_id":"SEA-GHSA-3hj7-6vmj-h8v4","evidence_tier":"security_advisory","title":"Security issue reported in pacioli-guard","summary":"pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document.","organization":"pacioli-guard project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-3hj7-6vmj-h8v4","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107841","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-3hj7-6vmj-h8v4"}
{"incident_id":"SEA-GHSA-3rxq-g8rj-r2cf","evidence_tier":"security_advisory","title":"Microsoft.NETCore.App.Runtime.linux-arm issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml.","organization":"Microsoft.NETCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-3rxq-g8rj-r2cf","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-69651","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-3rxq-g8rj-r2cf"}
{"incident_id":"SEA-GHSA-3wp9-xfwm-rjjf","evidence_tier":"security_advisory","title":"org.asynchttpclient:async-http-client issue could expose accounts or credentials","summary":"When a ws:// request is routed through an HTTP proxy with proxy authentication configured, the client tunnels the connection with an HTTP CONNECT, the same as it does for https://.","organization":"org.asynchttpclient:async-http-client project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-3wp9-xfwm-rjjf","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107285","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-3wp9-xfwm-rjjf"}
{"incident_id":"SEA-GHSA-3wr7-993q-jrff","evidence_tier":"security_advisory","title":"Security issue reported in github.com/corazawaf/coraza/v3","summary":"Coraza extracts a multipart file upload's filename using Go's standard-library mime.ParseMediaType, which only decodes the RFC 5987/6266 extended filename Content-Disposition parameter when its declared charset is…","organization":"github.com/corazawaf/coraza/v3 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Coraza: Multipart filename (RFC 5987) charset restriction lets a decoy filename bypass FILES-based rules","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-3wr7-993q-jrff","failure_patterns":"","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-3wr7-993q-jrff"}
{"incident_id":"SEA-GHSA-3xr5-8w6c-p5gw","evidence_tier":"security_advisory","title":"@backstage/backend-defaults issue could allow unauthorized access","summary":"An authenticated user could invoke actions that an operator had excluded through action configuration. Existing action permissions and downstream authorization remain enforced.","organization":"@backstage/backend-defaults project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Backstage: Improper access control in backend action invocation","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-3xr5-8w6c-p5gw","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-106495","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-3xr5-8w6c-p5gw"}
{"incident_id":"SEA-GHSA-44xr-mrhh-qm78","evidence_tier":"security_advisory","title":"Security issue reported in Nginx-UI","summary":"In the Casdoor SSO flow, the OAuth state parameter is hard-coded to settings.CasdoorSettings.Application — a value identical for every user and every login.","organization":"Nginx-UI project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: Casdoor SSO callback uses a constant state parameter (login CSRF)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-44xr-mrhh-qm78","failure_patterns":"SEA-FM-010","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84312","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-44xr-mrhh-qm78"}
{"incident_id":"SEA-GHSA-45gv-9wjv-xh7p","evidence_tier":"security_advisory","title":"github.com/0xJacky/Nginx-UI issue could allow unauthorized access","summary":"nginx-ui supports two second-factor methods — TOTP (OTP) and WebAuthn passkeys —","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-45gv-9wjv-xh7p","failure_patterns":"SEA-FM-003","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-107808","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-45gv-9wjv-xh7p"}
{"incident_id":"SEA-GHSA-47c3-hpmg-7j6p","evidence_tier":"security_advisory","title":"shiny issue could expose restricted files","summary":"Shiny for Python's bookmark-restore path accepted a client-supplied stateid","organization":"shiny project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Shiny for Python has path traversal in bookmark restore","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-47c3-hpmg-7j6p","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-108258","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-47c3-hpmg-7j6p"}
{"incident_id":"SEA-GHSA-48qf-xh34-q73r","evidence_tier":"security_advisory","title":"Security issue reported in mariadb","summary":"When encoding a GeoJSON Polygon or MultiPolygon parameter for the binary protocol, the connector sized its output buffer from the length property of each ring, then wrote each ring only if it was a real array.","organization":"mariadb project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-48qf-xh34-q73r","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107383","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-48qf-xh34-q73r"}
{"incident_id":"SEA-GHSA-494h-xx7x-5frh","evidence_tier":"security_advisory","title":"Security issue reported in Microsoft.AspNetCore.App.Runtime.linux-arm","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.Authorization.","organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-494h-xx7x-5frh","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70183","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-494h-xx7x-5frh"}
{"incident_id":"SEA-GHSA-4fjg-2h4q-fwg3","evidence_tier":"security_advisory","title":"github.com/cli/cli/v2 issue could expose restricted files","summary":"A path traversal vulnerability has been identified in the GitHub CLI where some HTTP request URLs, REST API calls in particular, were built without properly escaping their variable path components.","organization":"github.com/cli/cli/v2 project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"GitHub CLI allows path traversal through unescaped request URL components","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-4fjg-2h4q-fwg3","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-64653","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-4fjg-2h4q-fwg3"}
{"incident_id":"SEA-GHSA-4gfv-wg42-7jw5","evidence_tier":"security_advisory","title":"praisonaiagents issue could allow unintended commands to run","summary":"An unsafe dynamic module loading vulnerability allows an attacker who can control a workflow file and a sibling tools.py to execute arbitrary Python code when the workflow is executed.","organization":"praisonaiagents project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-4gfv-wg42-7jw5","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-61437","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-4gfv-wg42-7jw5"}
{"incident_id":"SEA-GHSA-4hv6-xc92-j86g","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"Vikunja v2.6.0 introduced server-side sessions with revocation semantics: DELETE /api/v2/user/sessions/{id} documents \"Revokes a specific session by its UUID\", and enabling TOTP calls DeleteAllUserSessions to invalidate…","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-4hv6-xc92-j86g","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.pii;data.uploaded_files;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-4hv6-xc92-j86g"}
{"incident_id":"SEA-GHSA-4j9v-h7pp-725h","evidence_tier":"security_advisory","title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-4j9v-h7pp-725h","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-70035","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-4j9v-h7pp-725h"}
{"incident_id":"SEA-GHSA-4mpw-cpwj-hxxj","evidence_tier":"security_advisory","title":"Microsoft.NETCore.App.Runtime.win-arm64 issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Sockets. This advisory also provides guidance on what developers can do to update their applications to remove this…","organization":"Microsoft.NETCore.App.Runtime.win-arm64 project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-4mpw-cpwj-hxxj","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-70197","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-4mpw-cpwj-hxxj"}
{"incident_id":"SEA-GHSA-4r3p-w3mc-5v34","evidence_tier":"security_advisory","title":"Security issue reported in praisonai","summary":"PraisonAI's opt-in prompt-injection defense (enableinjectiondefense()) only blocks at ThreatLevel.CRITICAL, which requires three or more distinct detector families to match simultaneously.","organization":"praisonai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-4r3p-w3mc-5v34","failure_patterns":"SEA-FM-004;SEA-FM-002","capabilities":"arch.content_ingestion_rag","is_ai_system":true,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-60086","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-4r3p-w3mc-5v34"}
{"incident_id":"SEA-GHSA-4w5f-7jp2-w48g","evidence_tier":"security_advisory","title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-4w5f-7jp2-w48g","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-83520","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-4w5f-7jp2-w48g"}
{"incident_id":"SEA-GHSA-4x9p-g9wm-8q7f","evidence_tier":"security_advisory","title":"Security issue reported in pydantic-ai","summary":"Pydantic AI's OpenTelemetry instrumentation supports InstrumentationSettings(includecontent=False) to exclude message content — user prompts, model completions, tool call arguments and responses, and any other message…","organization":"pydantic-ai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when include_content=False","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-4x9p-g9wm-8q7f","failure_patterns":"SEA-FM-010","capabilities":"data.pii;data.untrusted_external_text;arch.event_driven;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107291","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-4x9p-g9wm-8q7f"}
{"incident_id":"SEA-GHSA-4xxv-6wmf-xf45","evidence_tier":"security_advisory","title":"Security issue reported in praisonaiagents","summary":"PraisonAI's praisonaiagents.context.fast FastContext feature treats workspacepath as the root directory for code search, but its model-facing search tools and high-level readcontext() helper accept absolute paths and ..","organization":"praisonaiagents project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-4xxv-6wmf-xf45","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-61432","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-4xxv-6wmf-xf45"}
{"incident_id":"SEA-GHSA-526j-582w-7fm9","evidence_tier":"security_advisory","title":"Security issue reported in social-auth-core","summary":"Applications using the LINE Login backend are vulnerable to login CSRF / forced authentication. An attacker can start a LINE authorization flow for an account they control and trick a victim into visiting the callback…","organization":"social-auth-core project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Python Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-526j-582w-7fm9","failure_patterns":"","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-62322","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-526j-582w-7fm9"}
{"incident_id":"SEA-GHSA-53v6-4h7p-p4gj","evidence_tier":"security_advisory","title":"Security issue reported in music-metadata","summary":"music-metadata 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser.","organization":"music-metadata project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"music-metadata: Uncontrolled memory allocation in APEv2 parser","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-53v6-4h7p-p4gj","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107387","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-53v6-4h7p-p4gj"}
{"incident_id":"SEA-GHSA-54mm-6729-r5wp","evidence_tier":"security_advisory","title":"Security issue reported in leantime/leantime","summary":"Any authenticated Leantime user - including the lowest-privilege readonly role - can escalate to full administrative access by calling the JSON-RPC method leantime.rpc.api.api.createApiKeyWithProjects with an…","organization":"leantime/leantime project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-54mm-6729-r5wp","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85990","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-54mm-6729-r5wp"}
{"incident_id":"SEA-GHSA-556j-vv39-8rqv","evidence_tier":"security_advisory","title":"Security issue reported in banks","summary":"In banks.registries.DirectoryPromptRegistry, prompt file paths and the index file (index.json) do not refuse symbolic links. When a prompt directory contains or accepts untrusted files (e.g.","organization":"banks project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-556j-vv39-8rqv","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107716","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-556j-vv39-8rqv"}
{"incident_id":"SEA-GHSA-57xr-hfxx-jw5x","evidence_tier":"security_advisory","title":"Microsoft.AspNetCore.App.Runtime.linux-arm issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.WebUtilities.","organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-57xr-hfxx-jw5x","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-70196","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-57xr-hfxx-jw5x"}
{"incident_id":"SEA-GHSA-5gfj-9q3v-qfp3","evidence_tier":"security_advisory","title":"Security issue reported in music-metadata","summary":"The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer (VINT) element lengths without first validating that the declared element fits within its enclosing container or the available input.","organization":"music-metadata project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-5gfj-9q3v-qfp3","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107389","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-5gfj-9q3v-qfp3"}
{"incident_id":"SEA-GHSA-5gj4-9gm7-2fx2","evidence_tier":"security_advisory","title":"Security issue reported in github.com/corazawaf/coraza/v3","summary":"Coraza's JSON body processor converts nested JSON properties into dot-separated ARGSPOST names without escaping dots contained in literal property names.","organization":"github.com/corazawaf/coraza/v3 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Coraza body processor has a JSON key collision that allows unauthenticated attackers to bypass OWASP CRS inspection","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-5gj4-9gm7-2fx2","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-5gj4-9gm7-2fx2"}
{"incident_id":"SEA-GHSA-5gjq-3f94-rcf7","evidence_tier":"security_advisory","title":"Microsoft.Native.Quic.MsQuic.Schannel issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC as used by .NET 8.0, .NET 9.0, .NET 10.0, and .NET 11 RC2 on Windows.","organization":"Microsoft.Native.Quic.MsQuic.Schannel project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-5gjq-3f94-rcf7","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-105016","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-5gjq-3f94-rcf7"}
{"incident_id":"SEA-GHSA-5hjw-83fp-phq9","evidence_tier":"security_advisory","title":"Security issue reported in fast-jwt","summary":"fast-jwt's createVerifier silently skips all configured claim validators (exp, nbf, iss, aud, sub, jti, nonce) when a validly-signed JWT carries a JSON array as its payload instead of an object.","organization":"fast-jwt project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-5hjw-83fp-phq9","failure_patterns":"","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107723","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-5hjw-83fp-phq9"}
{"incident_id":"SEA-GHSA-5r62-gj48-897x","evidence_tier":"security_advisory","title":"Security issue reported in github.com/0xJacky/Nginx-UI","summary":"The regular HTTP configuration API rejects restricted Nginx directives such as loadmodule, jsimport, and jscontent.","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-5r62-gj48-897x","failure_patterns":"SEA-FM-010","capabilities":"data.pii;arch.async_job;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84319","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-5r62-gj48-897x"}
{"incident_id":"SEA-GHSA-5r6c-gj4g-r697","evidence_tier":"security_advisory","title":"Security issue reported in praisonai","summary":"SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for allowsubprocess, allowedpaths, blockedpaths, allowedcommands, blockedcommands, allowedimports, and…","organization":"praisonai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-5r6c-gj4g-r697","failure_patterns":"","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-60085","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-5r6c-gj4g-r697"}
{"incident_id":"SEA-GHSA-628f-v4f6-p37r","evidence_tier":"security_advisory","title":"contao/comments-bundle issue could run attacker-controlled scripts in a browser","summary":"An unauthenticated front end visitor can post a comment containing a XSS injection. The victim is any back end user who opens the Comments module, and moderation makes exposure certain rather than preventing it.","organization":"contao/comments-bundle project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Contao: Cross-site scripting in the comments bundle","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-628f-v4f6-p37r","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107845","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-628f-v4f6-p37r"}
{"incident_id":"SEA-GHSA-637c-6jxx-4rwm","evidence_tier":"security_advisory","title":"github.com/kedacore/keda issue could grant elevated privileges","summary":"A namespace admin who creates a TriggerAuthentication and a ScaledObject in their own namespace can make the KEDA operator send its own ServiceAccount token to a tenant-controlled URL.","organization":"github.com/kedacore/keda project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-637c-6jxx-4rwm","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-77524","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-637c-6jxx-4rwm"}
{"incident_id":"SEA-GHSA-663m-7x7m-g4fw","evidence_tier":"security_advisory","title":"github.com/BishopFox/sliver issue could make the service unavailable","summary":"Sliver is vulnerable to a Denial of Service (DOS) attack because there is no cap in the size of a PNG file that can be sent to an open http listener and there is a small amount of possible nonces.","organization":"github.com/BishopFox/sliver project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-663m-7x7m-g4fw","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-77622","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-663m-7x7m-g4fw"}
{"incident_id":"SEA-GHSA-685w-q87j-wqw3","evidence_tier":"security_advisory","title":"Security issue reported in github.com/docker/distribution","summary":"registry/client.(manifests).Get(ctx, dgst, …) fetches a manifest by digest but never hashes the returned body and compares it against the requested digest.","organization":"github.com/docker/distribution project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Distribution: Client manifests.Get() does not verify returned content against requested digest","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-685w-q87j-wqw3","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-85747","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-685w-q87j-wqw3"}
{"incident_id":"SEA-GHSA-687g-22h4-j4w4","evidence_tier":"security_advisory","title":"Security issue reported in fast-jwt","summary":"createVerifier({ clockTolerance: Infinity }) silently bypasses both exp (expiry) AND nbf (not-before) validation. Any expired or not-yet-active token is accepted as valid.","organization":"fast-jwt project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"fast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-687g-22h4-j4w4","failure_patterns":"","capabilities":"data.credentials_secrets;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107721","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-687g-22h4-j4w4"}
{"incident_id":"SEA-GHSA-68w4-83fh-f2w8","evidence_tier":"security_advisory","title":"Security issue reported in pyload-ng","summary":"Api.getUserData (legacy) and Api.getuserdata are declared with @permission(Perms.ANY) and are reachable at /api/getUserData and /api/getuserdata.","organization":"pyload-ng project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-68w4-83fh-f2w8","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-68w4-83fh-f2w8"}
{"incident_id":"SEA-GHSA-69qc-f5m6-889c","evidence_tier":"security_advisory","title":"ghost issue could run attacker-controlled scripts in a browser","summary":"Embed cards in the Ghost editor could be used to bypass the fix for GHSA-8vhf-xxpj-4qrg. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the post in the…","organization":"ghost project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"Ghost: Stored XSS via Embed Card Previews","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-69qc-f5m6-889c","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105643","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-69qc-f5m6-889c"}
{"incident_id":"SEA-GHSA-6fj4-rcr3-r7rr","evidence_tier":"security_advisory","title":"Security issue reported in lopdf","summary":"lopdf::Document::loadmem (and the other load entry points) parses nested PDF arrays and dictionaries with unbounded recursion.","organization":"lopdf project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"lopdf has a stack overflow via deeply nested PDF objects","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-6fj4-rcr3-r7rr","failure_patterns":"SEA-FM-006","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-6fj4-rcr3-r7rr"}
{"incident_id":"SEA-GHSA-6fqq-452j-qhrp","evidence_tier":"security_advisory","title":"Security issue reported in pydantic-ai","summary":"Applications that wrap a model with ConcurrencyLimitedModel or limitmodelconcurrency can permanently lose shared concurrency capacity when a streamed request releases its slot from a different task than the one that…","organization":"pydantic-ai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-6fqq-452j-qhrp","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107286","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-6fqq-452j-qhrp"}
{"incident_id":"SEA-GHSA-6gcq-wc29-5xf2","evidence_tier":"security_advisory","title":"Security issue reported in github.com/corazawaf/coraza/v3","summary":"The JSON body processor (internal/bodyprocessors/json.go) can be made to","organization":"github.com/corazawaf/coraza/v3 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-6gcq-wc29-5xf2","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107826","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-6gcq-wc29-5xf2"}
{"incident_id":"SEA-GHSA-6p4f-j8j6-463q","evidence_tier":"security_advisory","title":"Security issue reported in indico","summary":"A legacy API to retrieve session details could be misused to retrieve metadata (such as title, description and conveners) of a restricted session within without having access to that session, as long as the event itself…","organization":"indico project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Indico: Missing access check in legacy session export API","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-6p4f-j8j6-463q","failure_patterns":"","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107395","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-6p4f-j8j6-463q"}
{"incident_id":"SEA-GHSA-6rvj-qwjf-3m4q","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"registerAPIRoutesV2 never applies the unconditional pre-auth rate-limit floor (unauthRateLimit()) to the v2 public routes — it passes that limiter only to /api/v2/ws — and otherwise relies on setupRateLimit, which…","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/v1 twin is rate limited","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-6rvj-qwjf-3m4q","failure_patterns":"","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-91972","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-6rvj-qwjf-3m4q"}
{"incident_id":"SEA-GHSA-6wjp-v33h-5cvq","evidence_tier":"security_advisory","title":"Security issue reported in praisonai","summary":"The AgentOS server in the praisonai TypeScript/npm package ships an insecure default: it binds 0.0.0.0, sets no API key, and uses CORS with credentials.","organization":"praisonai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-6wjp-v33h-5cvq","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"data.credentials_secrets;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-61426","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-6wjp-v33h-5cvq"}
{"incident_id":"SEA-GHSA-754j-98wh-57rf","evidence_tier":"security_advisory","title":"Security issue reported in swoosh","summary":"Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address directly into the URL path (/users/{from}/sendMail) without percent-encoding or validation.","organization":"swoosh project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"swoosh has email-derived URL path injection in Microsoft Graph endpoint","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-754j-98wh-57rf","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-54893","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-754j-98wh-57rf"}
{"incident_id":"SEA-GHSA-76pm-mq2q-9gcr","evidence_tier":"security_advisory","title":"github.com/0xJacky/Nginx-UI issue could allow unintended commands to run","summary":"internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-76pm-mq2q-9gcr","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-84317","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-76pm-mq2q-9gcr"}
{"incident_id":"SEA-GHSA-77xj-x4rm-935c","evidence_tier":"security_advisory","title":"datamodel-code-generator issue could expose restricted files","summary":"When processing an attacker-controlled Protobuf schema, vulnerable versions of","organization":"datamodel-code-generator project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-77xj-x4rm-935c","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-107377","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-77xj-x4rm-935c"}
{"incident_id":"SEA-GHSA-788w-68h3-cvxp","evidence_tier":"security_advisory","title":"ghost issue could allow unintended commands to run","summary":"An image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in…","organization":"ghost project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"Ghost: Remote Code Execution via Bookmark Card Images","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-788w-68h3-cvxp","failure_patterns":"SEA-FM-002","capabilities":"data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-105642","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-788w-68h3-cvxp"}
{"incident_id":"SEA-GHSA-79fv-7hq9-w7xg","evidence_tier":"security_advisory","title":"Security issue reported in praisonai","summary":"PraisonAI's API deployment generator copies deploy.api.host from agents.yaml directly into generated Python source without safe literal encoding.","organization":"praisonai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-79fv-7hq9-w7xg","failure_patterns":"SEA-FM-010","capabilities":"auth.code_execution;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-61433","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-79fv-7hq9-w7xg"}
{"incident_id":"SEA-GHSA-7cxh-94cf-mfp6","evidence_tier":"security_advisory","title":"github.com/talos-systems/talos issue could expose accounts or credentials","summary":"When generating a support bundle with talosctl support the credentials entered for private registries are included in the bundle.","organization":"github.com/talos-systems/talos project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Talos Linux: Support bundle does not redact registry credentials","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-7cxh-94cf-mfp6","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-77564","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-7cxh-94cf-mfp6"}
{"incident_id":"SEA-GHSA-7hqp-7c5m-4vq6","evidence_tier":"security_advisory","title":"System.Security.Cryptography.Xml issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml.","organization":"System.Security.Cryptography.Xml project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-7hqp-7c5m-4vq6","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-96960","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-7hqp-7c5m-4vq6"}
{"incident_id":"SEA-GHSA-7pxr-59rr-hqj2","evidence_tier":"security_advisory","title":"Microsoft.OpenApi.YamlReader issue could make the service unavailable","summary":"A small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption in Microsoft.OpenApi.YamlReader and Microsoft.OpenApi.Readers.","organization":"Microsoft.OpenApi.YamlReader project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-7pxr-59rr-hqj2","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-72923","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-7pxr-59rr-hqj2"}
{"incident_id":"SEA-GHSA-846f-f764-76mx","evidence_tier":"security_advisory","title":"System.Security.Cryptography.Pkcs issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Pkcs.","organization":"System.Security.Cryptography.Pkcs project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-846f-f764-76mx","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-84008","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-846f-f764-76mx"}
{"incident_id":"SEA-GHSA-84m7-p3x7-pcfv","evidence_tier":"security_advisory","title":"mcp issue could make the service unavailable","summary":"In affected versions, a Streamable HTTP server in stateful mode (the default) never reclaimed session state:","organization":"mcp project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-84m7-p3x7-pcfv","failure_patterns":"SEA-FM-006;SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-59951","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-84m7-p3x7-pcfv"}
{"incident_id":"SEA-GHSA-856c-92hv-3vxx","evidence_tier":"security_advisory","title":"Security issue reported in apprise","summary":"Apprise's HTTP-based notification plugins and its HTTP attachment / config loaders (apprise/attachment/http.py, apprise/config/http.py) follow HTTP 3xx redirects by default and re-send the user-configured auth headers…","organization":"apprise project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Apprise forwards configured auth headers across cross-origin HTTP redirects","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-856c-92hv-3vxx","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-59180","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-856c-92hv-3vxx"}
{"incident_id":"SEA-GHSA-86xp-94pg-8r6r","evidence_tier":"security_advisory","title":"Microsoft.AspNetCore.SignalR.Protocols.MessagePack issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Protocols.MessagePack; MessagePack; MessagePack.Annotations; MessagePackAnalyzer.","organization":"Microsoft.AspNetCore.SignalR.Protocols.MessagePack project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-86xp-94pg-8r6r","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-86xp-94pg-8r6r"}
{"incident_id":"SEA-GHSA-87vj-4hqv-22p9","evidence_tier":"security_advisory","title":"Microsoft.NETCore.App.Runtime.linux-arm issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Runtime. This advisory also provides guidance on what developers can do to update their applications to remove this…","organization":"Microsoft.NETCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-87vj-4hqv-22p9","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-96233","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-87vj-4hqv-22p9"}
{"incident_id":"SEA-GHSA-889w-m37p-88m5","evidence_tier":"security_advisory","title":"Security issue reported in pyload-ng","summary":"An admin who revokes or downgrades a non-admin user's permissions through pyLoad's own documented","organization":"pyload-ng project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"pyLoad: Api.set_user_permission never invalidates the target's session","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-889w-m37p-88m5","failure_patterns":"","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-889w-m37p-88m5"}
{"incident_id":"SEA-GHSA-88f6-4rjv-x774","evidence_tier":"security_advisory","title":"code.vikunja.io/api issue could expose accounts or credentials","summary":"Once a user has TOTP enabled, the API still hands back the raw shared secret to anyone holding that account's access token. Reading it doesn't ask for the password, even though disabling TOTP does.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: TOTP secret is readable after enrollment, no step-up auth","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-88f6-4rjv-x774","failure_patterns":"SEA-FM-012","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-91982","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-88f6-4rjv-x774"}
{"incident_id":"SEA-GHSA-8r5x-fm3f-whwj","evidence_tier":"security_advisory","title":"Security issue reported in handlebars","summary":"Handlebars.compile() and Handlebars.precompile() accept a pre-parsed AST as well as a template string. Handlebars 4.7.9 added validation for such ASTs.","organization":"handlebars project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-8r5x-fm3f-whwj","failure_patterns":"","capabilities":"auth.infrastructure_modification;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106446","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-8r5x-fm3f-whwj"}
{"incident_id":"SEA-GHSA-8wpc-h4q6-8fxv","evidence_tier":"security_advisory","title":"Security issue reported in fast-jwt","summary":"createVerifier in fast-jwt ≤ 6.3.0 skips signature verification entirely when the key option is a falsy synchronous value ('' or null) and the algorithms option is set to a non-empty allowlist.","organization":"fast-jwt project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-8wpc-h4q6-8fxv","failure_patterns":"","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107720","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-8wpc-h4q6-8fxv"}
{"incident_id":"SEA-GHSA-8wvg-r2j4-3737","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"TaskAssginee.ReadAll returns assignee user objects without blanking the Email field, disclosing assignee email addresses to any read-only project member. Every sibling path that returns user objects obfuscates the email;","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-8wvg-r2j4-3737","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-8wvg-r2j4-3737"}
{"incident_id":"SEA-GHSA-9ffp-22j7-56r2","evidence_tier":"security_advisory","title":"generator-jhipster issue could run attacker-controlled scripts in a browser","summary":"Applications generated by generator-jhipster v9.2.0 can persist user-controlled Blob ContentType values and later use those values as the MIME type for client-side Blob objects.","organization":"generator-jhipster project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-9ffp-22j7-56r2","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107303","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-9ffp-22j7-56r2"}
{"incident_id":"SEA-GHSA-9h23-53f4-q947","evidence_tier":"security_advisory","title":"Security issue reported in github.com/0xJacky/Nginx-UI","summary":"In Nginx UI versions 2.2.0 through 2.5.x, the official bundled reverse-proxy topology did not preserve the external client identity used by Gin.","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-9h23-53f4-q947","failure_patterns":"","capabilities":"auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107804","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-9h23-53f4-q947"}
{"incident_id":"SEA-GHSA-9jww-cxg5-rj9m","evidence_tier":"security_advisory","title":"github.com/0xJacky/Nginx-UI issue could allow unintended commands to run","summary":"The MCP tool nginxconfigadd writes nginx configuration files to disk and triggers an nginx reload without calling config.ValidateConfigFile.","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: MCP nginx_config_add Bypasses Directive Validation — Authenticated RCE","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-9jww-cxg5-rj9m","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-84318","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-9jww-cxg5-rj9m"}
{"incident_id":"SEA-GHSA-9m4w-fmjw-fvjq","evidence_tier":"security_advisory","title":"ghost issue could make the service unavailable","summary":"A crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access.","organization":"ghost project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"Ghost: Regular Expression Denial of Service in External Media Inliner","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-9m4w-fmjw-fvjq","failure_patterns":"SEA-FM-006","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-105645","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-9m4w-fmjw-fvjq"}
{"incident_id":"SEA-GHSA-9mp3-24cc-77mg","evidence_tier":"security_advisory","title":"Security issue reported in praisonai","summary":"The AICoder UI component exposes writetofile and executecommand tools to the LLM with no path validation and no command sanitization.","organization":"praisonai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-9mp3-24cc-77mg","failure_patterns":"SEA-FM-004;SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-61445","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-9mp3-24cc-77mg"}
{"incident_id":"SEA-GHSA-9q47-3cm2-2rp8","evidence_tier":"security_advisory","title":"Security issue reported in pyload-ng","summary":"pyLoad determines the \"client IP\" used for its rate-limiting decorator and for its","organization":"pyload-ng project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled X-Forwarded-For Header","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-9q47-3cm2-2rp8","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-9q47-3cm2-2rp8"}
{"incident_id":"SEA-GHSA-9rg3-v78m-26q8","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"API token permission checks only match the HTTP method and route path. The expand query parameter on task read endpoints embeds data from other permission groups (task comments, reactions, time entry counts) without…","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-9rg3-v78m-26q8","failure_patterns":"","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-91983","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-9rg3-v78m-26q8"}
{"incident_id":"SEA-GHSA-9rjx-3jch-6vjf","evidence_tier":"security_advisory","title":"enshrined/svg-sanitize issue could run attacker-controlled scripts in a browser","summary":"A crafted SVG bypasses enshrined/svg-sanitize's href validation and delivers a javascript: URL through the sanitizer unchanged.","organization":"enshrined/svg-sanitize project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-9rjx-3jch-6vjf","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107380","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-9rjx-3jch-6vjf"}
{"incident_id":"SEA-GHSA-c27m-942f-rcfh","evidence_tier":"security_advisory","title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-c27m-942f-rcfh","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-87697","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-c27m-942f-rcfh"}
{"incident_id":"SEA-GHSA-c399-9853-6jmj","evidence_tier":"security_advisory","title":"System.Security.Cryptography.Xml issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml.","organization":"System.Security.Cryptography.Xml project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-c399-9853-6jmj","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-96959","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-c399-9853-6jmj"}
{"incident_id":"SEA-GHSA-c3jg-qh8m-j3h2","evidence_tier":"security_advisory","title":"cairosvg issue could make the service unavailable","summary":"Rendering an untrusted SVG whose contains many segments is O(n²) CPU. A single under 1 MiB burns tens of seconds. Two independent O(n²) sites in cairosvg/path.py:","organization":"cairosvg project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-c3jg-qh8m-j3h2","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107378","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-c3jg-qh8m-j3h2"}
{"incident_id":"SEA-GHSA-c42q-qvc3-j6vg","evidence_tier":"security_advisory","title":"@tinacms/web-components issue could run attacker-controlled scripts in a browser","summary":"renders a rich-text AST into the DOM and, for a nodes, assigns the node's URL straight to the anchor's href with no scheme check.","organization":"@tinacms/web-components project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"@tinacms/web-components: tina-markdown writes rich-text link URLs into href without scheme validation, allowing stored XSS","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-c42q-qvc3-j6vg","failure_patterns":"","capabilities":"auth.infrastructure_modification;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-108260","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-c42q-qvc3-j6vg"}
{"incident_id":"SEA-GHSA-c44f-37qr-gw3f","evidence_tier":"security_advisory","title":"Security issue reported in praisonaiagents","summary":"SkillTools.runskillscript() accepts a scriptpath parameter and executes it via subprocess.run() without any path containment validation.","organization":"praisonaiagents project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: SkillTools Executes Scripts Without Path Containment Validation","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-c44f-37qr-gw3f","failure_patterns":"","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-61443","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-c44f-37qr-gw3f"}
{"incident_id":"SEA-GHSA-c6rp-p8xm-4q9f","evidence_tier":"security_advisory","title":"mechanize issue could expose accounts or credentials","summary":"mechanize applied no trust boundary to a meta refresh, so credentials set through Mechanizerequestheaders= followed a refresh that pointed at another origin.","organization":"mechanize project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Mechanize sends credential headers to another origin after a meta refresh","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-c6rp-p8xm-4q9f","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107399","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-c6rp-p8xm-4q9f"}
{"incident_id":"SEA-GHSA-c78w-2q4r-68r7","evidence_tier":"security_advisory","title":"Security issue reported in praisonai-platform","summary":"praisonai-platform lets an ordinary workspace member patch owner-created project, issue, and agent records even though the paired delete routes enforce owner/admin authorization.","organization":"praisonai-platform project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-c78w-2q4r-68r7","failure_patterns":"SEA-FM-010","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-61442","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-c78w-2q4r-68r7"}
{"incident_id":"SEA-GHSA-cf23-7qxj-xmhr","evidence_tier":"security_advisory","title":"github.com/0xJacky/Nginx-UI issue could allow unintended commands to run","summary":"config.ValidateConfigFile is the security control that blocks dangerous nginx directives","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line \";\" separation → authenticated directive injection (RCE on the official image)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-cf23-7qxj-xmhr","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-84316","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-cf23-7qxj-xmhr"}
{"incident_id":"SEA-GHSA-cg6r-mpgc-h9mm","evidence_tier":"security_advisory","title":"Security issue reported in github.com/cli/cli/v2","summary":"A security vulnerability has been identified in GitHub CLI where gh auth status could potentially print a portion of the authentication token in plaintext, depending on the lexical structure of the token.","organization":"github.com/cli/cli/v2 project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"GitHub CLI partially discloses authentication tokens in gh auth status output","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-cg6r-mpgc-h9mm","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-64652","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-cg6r-mpgc-h9mm"}
{"incident_id":"SEA-GHSA-cgc7-9qp3-86m3","evidence_tier":"security_advisory","title":"Security issue reported in docling","summary":"The HTML, JATS, ODS (OpenDocument spreadsheet) and BoxNote backends accept table rowspan / colspan values without an upper bound.","organization":"docling project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-cgc7-9qp3-86m3","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105749","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-cgc7-9qp3-86m3"}
{"incident_id":"SEA-GHSA-cr65-55v9-xhvv","evidence_tier":"security_advisory","title":"Security issue reported in diohttp2adapter","summary":"diohttp2adapter follows HTTP Location redirects without stripping sensitive request headers when the redirect target is a different origin.","organization":"diohttp2adapter project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Dio: Cross-origin redirect leaks sensitive request headers in dio_http2_adapter","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-cr65-55v9-xhvv","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-103030","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-cr65-55v9-xhvv"}
{"incident_id":"SEA-GHSA-cv23-7vc5-jfh7","evidence_tier":"security_advisory","title":"Security issue reported in github.com/gomarkdown/markdown","summary":"IsSafeURL slices url[:nPath] before checking that len(url) = nPath, so a URL shorter than a path prefix (0, 1 or 2 bytes) triggers a slice-bounds panic, and this is reached end to end when the html.Safelink hardening…","organization":"github.com/gomarkdown/markdown project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"gomarkdown/markdown IsSafeURL panics on short URLs","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-cv23-7vc5-jfh7","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-102941","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-cv23-7vc5-jfh7"}
{"incident_id":"SEA-GHSA-cv3g-hj65-pcfh","evidence_tier":"security_advisory","title":"Security issue reported in praisonai","summary":"The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2mjm-h6qj (utility-tools shell chaining) and GHSA-vjv9-7m7j-h833 (SandboxExecutor chaining) can be bypassed via…","organization":"praisonai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: Shell command allowlist bypass via find -exec built-in action","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-cv3g-hj65-pcfh","failure_patterns":"","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-61434","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-cv3g-hj65-pcfh"}
{"incident_id":"SEA-GHSA-cx2f-j9fh-8g68","evidence_tier":"security_advisory","title":"Security issue reported in mariadb","summary":"On the zero-configuration TLS path, the connector accepts a self-signed server certificate at the TLS level and then validates the server's identity from the fingerprint hash the server appends to the final OKPacket…","organization":"mariadb project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-cx2f-j9fh-8g68","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107382","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-cx2f-j9fh-8g68"}
{"incident_id":"SEA-GHSA-f4g7-52wc-p8x7","evidence_tier":"security_advisory","title":"Microsoft.AspNetCore.App.Runtime.linux-arm issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Localization.","organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-f4g7-52wc-p8x7","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-96236","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-f4g7-52wc-p8x7"}
{"incident_id":"SEA-GHSA-f63g-mx39-3r38","evidence_tier":"security_advisory","title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-f63g-mx39-3r38","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-85363","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-f63g-mx39-3r38"}
{"incident_id":"SEA-GHSA-f749-vhgx-39h6","evidence_tier":"security_advisory","title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-f749-vhgx-39h6","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-70174","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-f749-vhgx-39h6"}
{"incident_id":"SEA-GHSA-f8ff-652m-j5rx","evidence_tier":"security_advisory","title":"Security issue reported in yourls/yourls","summary":"YOURLS versions ≤1.10.4 contain an unauthenticated path traversal vulnerability that allows attackers to include and execute arbitrary PHP files on the server without any credentials.","organization":"yourls/yourls project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"YOURLS: Unauthenticated File Inclusion","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-f8ff-652m-j5rx","failure_patterns":"SEA-FM-002","capabilities":"data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-62858","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-f8ff-652m-j5rx"}
{"incident_id":"SEA-GHSA-f94x-6692-553q","evidence_tier":"security_advisory","title":"music-metadata issue could make the service unavailable","summary":"StsdAtom.get() in lib/mp4/AtomToken.ts parses an MP4 stsd (sample description) box's entry table by advancing a cursor with off += size - 4, where size is a 32-bit, attacker-controlled per-entry length read straight from…","organization":"music-metadata project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-f94x-6692-553q","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107391","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-f94x-6692-553q"}
{"incident_id":"SEA-GHSA-f9m8-cv68-674w","evidence_tier":"security_advisory","title":"Security issue reported in org.asynchttpclient:async-http-client","summary":"The cookie store decides whether a Domain attribute may be accepted using only the domain-matching rule of RFC 6265 Section 5.1.3, which asks whether the request host is the domain or ends with a dot followed by it.","organization":"org.asynchttpclient:async-http-client project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-f9m8-cv68-674w","failure_patterns":"","capabilities":"auth.write_action;auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107280","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-f9m8-cv68-674w"}
{"incident_id":"SEA-GHSA-fj8f-m44g-c479","evidence_tier":"security_advisory","title":"Security issue reported in PraisonAI","summary":"Injection Defense is a purpose-built prompt injection defense layer. It scans LLM inputs through six detection categories: instruction overrides, authority claims, boundary manipulation, obfuscation, financial…","organization":"PraisonAI project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-fj8f-m44g-c479","failure_patterns":"SEA-FM-004;SEA-FM-002","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-61439","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-fj8f-m44g-c479"}
{"incident_id":"SEA-GHSA-fmmf-xq98-g327","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"A project member with Write permission can delete an admin-tier link share on that project. The deletion authorization check reads the permission from an object populated only with URL IDs, rather than from the stored…","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-fmmf-xq98-g327","failure_patterns":"","capabilities":"auth.destructive_action;auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-fmmf-xq98-g327"}
{"incident_id":"SEA-GHSA-fmxq-cgp8-87wp","evidence_tier":"security_advisory","title":"Security issue reported in github.com/argoproj/argo-cd/v2","summary":"Argo CD checks an Application's AppProject before it creates resources during a sync. That check covers destination namespaces and servers, cluster-scoped resource allow and deny lists, and namespaced resource allow and…","organization":"github.com/argoproj/argo-cd/v2 project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-fmxq-cgp8-87wp","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-77459","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-fmxq-cgp8-87wp"}
{"incident_id":"SEA-GHSA-fpf4-vwcp-v4hp","evidence_tier":"security_advisory","title":"Security issue reported in pydantic-ai","summary":"The local web-fetch tool (webfetchtool, also used as the WebFetch capability's local fallback) processed responses with several steps whose running time grows quadratically with the size of certain server-controlled…","organization":"pydantic-ai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Pydantic AI: Event loop blocked by quadratic title extraction in web_fetch","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-fpf4-vwcp-v4hp","failure_patterns":"","capabilities":"arch.event_driven","is_ai_system":true,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107290","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-fpf4-vwcp-v4hp"}
{"incident_id":"SEA-GHSA-fprf-r6rv-xg99","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"In Vikunja v2.6.0 the task position recalculation that runs when a saved filter view is created fails open when the requesting user has no accessible projects.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-fprf-r6rv-xg99","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-fprf-r6rv-xg99"}
{"incident_id":"SEA-GHSA-fqpq-cx42-9jmm","evidence_tier":"security_advisory","title":"Security issue reported in Microsoft.NETCore.App.Runtime.linux-arm","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Security. This advisory also provides guidance on what developers can do to update their applications to remove…","organization":"Microsoft.NETCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-fqpq-cx42-9jmm","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-70194","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-fqpq-cx42-9jmm"}
{"incident_id":"SEA-GHSA-fr26-jjhm-638c","evidence_tier":"security_advisory","title":"Security issue reported in pyload-ng","summary":"UnTar.safeextractall — the hardening added for GHSA-mvwx-582f-56r7 — validates member","organization":"pyload-ng project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-fr26-jjhm-638c","failure_patterns":"","capabilities":"auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-fr26-jjhm-638c"}
{"incident_id":"SEA-GHSA-fwh9-qg68-vxp4","evidence_tier":"security_advisory","title":"ghost issue could make the service unavailable","summary":"A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access.","organization":"ghost project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"Ghost: Regular Expression Denial of Service in Content Import","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-fwh9-qg68-vxp4","failure_patterns":"SEA-FM-006","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-105646","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-fwh9-qg68-vxp4"}
{"incident_id":"SEA-GHSA-g27p-qf6j-c96c","evidence_tier":"security_advisory","title":"Microsoft.AspNetCore.Components.WebAssembly.Server issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in the Blazor WebAssembly debugger included in Microsoft.AspNetCore.Components.WebAssembly.Server.","organization":"Microsoft.AspNetCore.Components.WebAssembly.Server project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-g27p-qf6j-c96c","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-102870","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-g27p-qf6j-c96c"}
{"incident_id":"SEA-GHSA-g38j-7v97-x298","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"Creating a task relation over CalDAV does not run the TaskRelation.CanCreate permission check that the REST API enforces. An attacker can attach a relation to any task whose UID they know, including tasks in projects…","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-g38j-7v97-x298","failure_patterns":"","capabilities":"auth.privileged_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-g38j-7v97-x298"}
{"incident_id":"SEA-GHSA-g3jj-5cmm-3hxx","evidence_tier":"security_advisory","title":"fast-jwt issue could expose accounts or credentials","summary":"fast-jwt 6.2.4 silently classifies raw serialized public JWK JSON","organization":"fast-jwt project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-g3jj-5cmm-3hxx","failure_patterns":"SEA-FM-012","capabilities":"auth.public_publication;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107724","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-g3jj-5cmm-3hxx"}
{"incident_id":"SEA-GHSA-g44w-h65v-4cw9","evidence_tier":"security_advisory","title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-g44w-h65v-4cw9","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-96235","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-g44w-h65v-4cw9"}
{"incident_id":"SEA-GHSA-g4f2-2pf3-2pwj","evidence_tier":"security_advisory","title":"react/http issue could make the service unavailable","summary":"React\\Http\\Browser and its lower-level HTTP stack impose no limit on the size of a response's header section while it is being received.","organization":"react/http project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-g4f2-2pf3-2pwj","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.untrusted_external_text;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-104827","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-g4f2-2pf3-2pwj"}
{"incident_id":"SEA-GHSA-g4qm-m288-5cp9","evidence_tier":"security_advisory","title":"Security issue reported in github.com/corazawaf/coraza/v3","summary":"Coraza's cookie parser (internal/cookies.ParseCookies) does not strip ASCII control characters (CTLs) from the edges of a cookie name/value before they're matched against REQUESTCOOKIES / REQUESTCOOKIESNAMES.","organization":"github.com/corazawaf/coraza/v3 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Coraza has Cookie Parser Confusion","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-g4qm-m288-5cp9","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-g4qm-m288-5cp9"}
{"incident_id":"SEA-GHSA-g8cf-rcjf-c8cf","evidence_tier":"security_advisory","title":"Security issue reported in github.com/getkin/kin-openapi","summary":"kin-openapi's spec loader and spec-time validator both handle circular schema references safely: the loader resolves circular $refs on purpose (to support recursive data structures), and Schema.validate() uses…","organization":"github.com/getkin/kin-openapi project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-g8cf-rcjf-c8cf","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-100354","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-g8cf-rcjf-c8cf"}
{"incident_id":"SEA-GHSA-h4mw-j7qp-8mwm","evidence_tier":"security_advisory","title":"claude-agent-sdk issue could allow unintended commands to run","summary":"The Claude Agent SDK for Python passed the resume option to the Claude CLI without validation, allowing a value beginning with - to be interpreted as a separate CLI flag.","organization":"claude-agent-sdk project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-h4mw-j7qp-8mwm","failure_patterns":"SEA-FM-004;SEA-FM-002;SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-96620","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-h4mw-j7qp-8mwm"}
{"incident_id":"SEA-GHSA-h4xc-3qfq-jf93","evidence_tier":"security_advisory","title":"Security issue reported in pydantic-ai","summary":"The Pydantic AI development web chat UI (Agent.toweb(), clai web) did not check the content type of requests to its chat endpoint.","organization":"pydantic-ai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Pydantic AI Web chat UI (Agent.to_web(), clai web): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpoint","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-h4xc-3qfq-jf93","failure_patterns":"SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107295","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-h4xc-3qfq-jf93"}
{"incident_id":"SEA-GHSA-h9h9-2rmf-rvhp","evidence_tier":"security_advisory","title":"Security issue reported in com.github.junrar:junrar","summary":"Junrar's RAR virtual machine can be forced into a deterministic infinite loop while extracting a crafted RAR4 archive. The RarVM.ExecuteCode loop is intended to be bounded by maxOpCount, but jump instructions can bypass…","organization":"com.github.junrar:junrar project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-h9h9-2rmf-rvhp","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-97370","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-h9h9-2rmf-rvhp"}
{"incident_id":"SEA-GHSA-hc5v-gxvj-58wh","evidence_tier":"security_advisory","title":"Security issue reported in praisonai","summary":"PraisonAI's MCP HTTP-stream server authenticates requests only when an API key is configured; the CLI defaults --api-key to None, so praisonai mcp serve --transport http-stream exposes the full MCP surface…","organization":"praisonai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-hc5v-gxvj-58wh","failure_patterns":"SEA-FM-012;SEA-FM-010","capabilities":"data.credentials_secrets;arch.async_job;arch.event_driven;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-61427","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-hc5v-gxvj-58wh"}
{"incident_id":"SEA-GHSA-hjx8-qv73-f7cm","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"A collaborator removed from a project keeps a live, automatic feed of that project's contents, because nothing on any revocation path deletes the webhook they created while they had access.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-hjx8-qv73-f7cm","failure_patterns":"","capabilities":"auth.destructive_action;arch.external_api;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-hjx8-qv73-f7cm"}
{"incident_id":"SEA-GHSA-hmq2-7hp6-7crh","evidence_tier":"security_advisory","title":"Security issue reported in banks","summary":"Banks' Prompt.chatmessages() method parses every rendered output line as a potential ChatMessage JSON","organization":"banks project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Banks: User-controlled prompt input can be parsed as privileged chat messages","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-hmq2-7hp6-7crh","failure_patterns":"","capabilities":"auth.privileged_action;data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107717","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-hmq2-7hp6-7crh"}
{"incident_id":"SEA-GHSA-hqm2-cfx2-2vgh","evidence_tier":"security_advisory","title":"Security issue reported in pipecat-ai","summary":"Pipecat’s built-in development runner exposes endpoints that create bot sessions and, for the Daily transport, paid Daily rooms. These development endpoints intentionally do not authenticate callers.","organization":"pipecat-ai project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-hqm2-cfx2-2vgh","failure_patterns":"","capabilities":"auth.public_publication","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-102682","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-hqm2-cfx2-2vgh"}
{"incident_id":"SEA-GHSA-hqq2-xqr2-fmx2","evidence_tier":"security_advisory","title":"ghost issue could run attacker-controlled scripts in a browser","summary":"SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of…","organization":"ghost project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"Ghost : Stored XSS via SVG Files in Content Imports","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-hqq2-xqr2-fmx2","failure_patterns":"","capabilities":"auth.privileged_action;data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-105644","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-hqq2-xqr2-fmx2"}
{"incident_id":"SEA-GHSA-j3hg-9rp3-5hw9","evidence_tier":"security_advisory","title":"Security issue reported in github.com/0xJacky/Nginx-UI","summary":"In Nginx UI versions 2.5.0 through 2.5.x, the node-signature authentication path staged an attacker-controlled request body in a temporary file and synchronized it to disk before validating the body digest and…","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-j3hg-9rp3-5hw9","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107805","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-j3hg-9rp3-5hw9"}
{"incident_id":"SEA-GHSA-j6cw-g6p4-7hch","evidence_tier":"security_advisory","title":"github.com/argoproj/argo-cd/v2 issue could allow unintended commands to run","summary":"Argo CD runs a shell command in the repo-server when it clones or fetches an SSH Git repository that has a proxy URL. The proxy host and port are copied into an SSH ProxyCommand.","organization":"github.com/argoproj/argo-cd/v2 project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-j6cw-g6p4-7hch","failure_patterns":"SEA-FM-002","capabilities":"auth.code_execution","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-55797","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-j6cw-g6p4-7hch"}
{"incident_id":"SEA-GHSA-j92p-c242-7hfx","evidence_tier":"security_advisory","title":"Security issue reported in pyload-ng","summary":"The /web/ route in src/pyload/webui/app/blueprints/appblueprint.py renders Jinja2 templates without any authentication requirement.","organization":"pyload-ng project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-j92p-c242-7hfx","failure_patterns":"","capabilities":"arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-75597","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-j92p-c242-7hfx"}
{"incident_id":"SEA-GHSA-jjpr-9cvf-cq55","evidence_tier":"security_advisory","title":"music-metadata issue could make the service unavailable","summary":"The ID3v2 parser in music-metadata trusts the tag size field without validation and allocates the full requested buffer before reading.","organization":"music-metadata project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-jjpr-9cvf-cq55","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107388","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-jjpr-9cvf-cq55"}
{"incident_id":"SEA-GHSA-jq7h-wrvp-3rgx","evidence_tier":"security_advisory","title":"Security issue reported in pyload-ng","summary":"An admin who revokes a user's privileges through the REST API does not actually revoke them, because the session carrying those privileges is never invalidated.","organization":"pyload-ng project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-jq7h-wrvp-3rgx","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-jq7h-wrvp-3rgx"}
{"incident_id":"SEA-GHSA-jrq7-xrjx-pcfw","evidence_tier":"security_advisory","title":"github.com/0xJacky/Nginx-UI issue could expose restricted files","summary":"Nginx UI validates backuppath and storagepath against the administrator-defined backup.GrantedAccessPath boundary, but the final auto-backup output filename is built from the user-controlled auto-backup name without…","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: Auto backup name allows path traversal outside validated storage path","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-jrq7-xrjx-pcfw","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-84320","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-jrq7-xrjx-pcfw"}
{"incident_id":"SEA-GHSA-jw42-f3rr-4cc3","evidence_tier":"security_advisory","title":"Security issue reported in github.com/xuri/excelize/v2","summary":"A worksheet whose number is far past Excel's 1,048,576-row limit makes File.GetRows and the Rows iterator loop once for every missing row.","organization":"github.com/xuri/excelize/v2 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-jw42-f3rr-4cc3","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107212","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-jw42-f3rr-4cc3"}
{"incident_id":"SEA-GHSA-jwrc-gm9j-263p","evidence_tier":"security_advisory","title":"Security issue reported in jupyterlab","summary":"A Markdown file or a notebook output can carry a button that runs a JupyterLab command. Since 4.5.7 the first click on such a button opens a prompt naming the command, with Cancel, Run Once and Trust.","organization":"jupyterlab project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-jwrc-gm9j-263p","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-102832","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-jwrc-gm9j-263p"}
{"incident_id":"SEA-GHSA-m469-88xx-8rx2","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"The /dav, /.well-known, and /feeds groups are registered on the root Echo instance with only BasicAuth and no rate limiter.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute-force floor on account passwords","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-m469-88xx-8rx2","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-91973","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-m469-88xx-8rx2"}
{"incident_id":"SEA-GHSA-m687-p538-r5hp","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"Vikunja ships with cors.origins defaulting to http://127.0.0.1: and http://localhost:, and sends Access-Control-Allow-Credentials: true, so a page served from any port on the user's own machine may make credentialed…","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-m687-p538-r5hp","failure_patterns":"SEA-FM-003","capabilities":"data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-m687-p538-r5hp"}
{"incident_id":"SEA-GHSA-m6rx-h84q-8r95","evidence_tier":"security_advisory","title":"Security issue reported in @langchain/mongodb","summary":"MongoDBChatMessageHistory did not enforce the documented string type for session identifiers at runtime. In affected applications, a structured session identifier could be interpreted as a MongoDB query condition rather…","organization":"@langchain/mongodb project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"LangChain: MongoDBChatMessageHistory query injection can allow cross-session access","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-m6rx-h84q-8r95","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106119","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-m6rx-h84q-8r95"}
{"incident_id":"SEA-GHSA-m6wp-h223-4c8g","evidence_tier":"security_advisory","title":"Security issue reported in praisonaiagents","summary":"The plugin manager loads and executes arbitrary .py files from .praisonai/plugins/ directories (both project-level and user home) via importlib.util.specfromfilelocation() + execmodule() with zero code signing, integrity…","organization":"praisonaiagents project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-m6wp-h223-4c8g","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-61446","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-m6wp-h223-4c8g"}
{"incident_id":"SEA-GHSA-m6wq-39m7-9xpp","evidence_tier":"security_advisory","title":"Metalama.Framework issue could allow unintended commands to run","summary":"Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories.","organization":"Metalama.Framework project","incident_date":"2026-10-14","date_basis":"","source_type":"cve_advisory","source_title":"Metalama allows local code execution through DLL planting in shared temporary directories","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-m6wq-39m7-9xpp","failure_patterns":"SEA-FM-002","capabilities":"arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-62847","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-m6wq-39m7-9xpp"}
{"incident_id":"SEA-GHSA-m952-2w3f-6r8h","evidence_tier":"security_advisory","title":"Security issue reported in strawberry-graphql","summary":"Strawberry's legacy graphql-ws subscription handler can retain task and subscription bookkeeping after a one-shot subscription has naturally sent its complete message.","organization":"strawberry-graphql project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Strawberry legacy graphql-ws retains naturally completed subscription slots","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-m952-2w3f-6r8h","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107727","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-m952-2w3f-6r8h"}
{"incident_id":"SEA-GHSA-m9xh-6747-9r6f","evidence_tier":"security_advisory","title":"enshrined/svg-sanitize issue could make the service unavailable","summary":"Resolver::processReferences() collects elements with the XPath predicate use[@href or @xlink:href], which is case sensitive.","organization":"enshrined/svg-sanitize project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"svg-sanitizer: Mixed-case xlink:HrEf skips the <use> nesting-DoS check in Resolver::processReferences","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-m9xh-6747-9r6f","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107381","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-m9xh-6747-9r6f"}
{"incident_id":"SEA-GHSA-mc4q-93x5-f6hj","evidence_tier":"security_advisory","title":"Microsoft.NETCore.App.Runtime.linux-arm issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml and System.Private.Xml.","organization":"Microsoft.NETCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-mc4q-93x5-f6hj","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-58280","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-mc4q-93x5-f6hj"}
{"incident_id":"SEA-GHSA-mcr4-qmvw-px4g","evidence_tier":"security_advisory","title":"Security issue reported in at.yawk.lz4:lz4-java","summary":"When no system-installed liblz4-java is found, net.jpountz.util.Native.load() extracts the bundled native library to java.io.tmpdir and loads it with System.load.","organization":"at.yawk.lz4:lz4-java project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-mcr4-qmvw-px4g","failure_patterns":"","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106451","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-mcr4-qmvw-px4g"}
{"incident_id":"SEA-GHSA-mf4x-w4gh-4656","evidence_tier":"security_advisory","title":"Microsoft.AspNetCore.App.Runtime.linux-arm issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core.","organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-mf4x-w4gh-4656","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-70186","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-mf4x-w4gh-4656"}
{"incident_id":"SEA-GHSA-mh7x-f8wq-4jhx","evidence_tier":"security_advisory","title":"github.com/getkin/kin-openapi issue could make the service unavailable","summary":"Confirmed at HEAD (f0407d5, v0.144.0). openapi3/loader.go, inside resolveComponent's drill closure (around line 455), the case SchemaRef branch for pathPart == \"additionalProperties\" dereferences…","organization":"github.com/getkin/kin-openapi project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-mh7x-f8wq-4jhx","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-100348","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-mh7x-f8wq-4jhx"}
{"incident_id":"SEA-GHSA-mjcv-p78q-w5fw","evidence_tier":"security_advisory","title":"github.com/moby/sys/user issue could make the service unavailable","summary":"A denial-of-service (DoS) vulnerability exists in github.com/moby/sys/user before v0.4.1 when parsing specially crafted user or group database files.","organization":"github.com/moby/sys/user project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-mjcv-p78q-w5fw","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-61801","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-mjcv-p78q-w5fw"}
{"incident_id":"SEA-GHSA-mp22-58ff-6fhr","evidence_tier":"security_advisory","title":"github.com/getarcaneapp/arcane/backend/v2 issue could expose accounts or credentials","summary":"Arcane v2.10.2 contains an authorization inconsistency in AuthMiddleware.managerAuth.","organization":"github.com/getarcaneapp/arcane/backend/v2 project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Arcane: Environment access token bypasses the admin-required authorization gate on /api/debug/pprof","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-mp22-58ff-6fhr","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-96628","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-mp22-58ff-6fhr"}
{"incident_id":"SEA-GHSA-p2jm-6hj6-9rjg","evidence_tier":"security_advisory","title":"Security issue reported in org.asynchttpclient:async-http-client","summary":"The cookie store ignores the scheme a Set-Cookie arrived on. draft-ietf-httpbis-rfc6265bis-22 (approved to obsolete RFC 6265, in the RFC Editor queue) Section 5.7 requires a user agent to ignore a cookie with the Secure…","organization":"org.asynchttpclient:async-http-client project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-p2jm-6hj6-9rjg","failure_patterns":"SEA-FM-010","capabilities":"auth.destructive_action;auth.write_action;data.pii;arch.async_job;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107226","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-p2jm-6hj6-9rjg"}
{"incident_id":"SEA-GHSA-p3fw-7699-7926","evidence_tier":"security_advisory","title":"Security issue reported in docling","summary":"HTMLBackendOptions.headers is documented for passing authentication headers (API keys, bearer tokens) when fetching remote images.","organization":"docling project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"Docling: Configured HTTP headers sent to every remote image host named by a document","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-p3fw-7699-7926","failure_patterns":"SEA-FM-012","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-105742","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-p3fw-7699-7926"}
{"incident_id":"SEA-GHSA-p3pr-8f3m-4qp8","evidence_tier":"security_advisory","title":"pyload-ng issue could reach internal services","summary":"pyLoad ships the WindowsPhoneNotify addon, whose send() method opens an HTTP connection to a host taken directly from the plugin's pushurl configuration value.","organization":"pyload-ng project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-p3pr-8f3m-4qp8","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-p3pr-8f3m-4qp8"}
{"incident_id":"SEA-GHSA-p7v4-vr35-mj6f","evidence_tier":"security_advisory","title":"Security issue reported in github.com/containerd/containerd/v2","summary":"A vulnerability in containerd's CRI implementation allows a container restored from an untrusted checkpoint via the CreateContainer API to bypass the destination security context and execute with elevated privileges.","organization":"github.com/containerd/containerd/v2 project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"containerd CRI plugin: Checkpoint restore bypasses destination security context","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-p7v4-vr35-mj6f","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-95837","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-p7v4-vr35-mj6f"}
{"incident_id":"SEA-GHSA-p8v3-89rh-jxc7","evidence_tier":"security_advisory","title":"Security issue reported in github.com/0xJacky/Nginx-UI","summary":"An authenticated user who can create and restore a backup can craft a valid backup archive that causes the restore staging process to write attacker-controlled files into the live Nginx configuration path even when both…","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-p8v3-89rh-jxc7","failure_patterns":"","capabilities":"auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107810","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-p8v3-89rh-jxc7"}
{"incident_id":"SEA-GHSA-p8wg-vrv2-v86f","evidence_tier":"security_advisory","title":"Security issue reported in handlebars","summary":"Handlebars can expose the Function constructor despite its prototype-access deny list. When a template reaches Function.prototype, its own constructor property is returned before the deny list is checked.","organization":"handlebars project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Handlebars: JavaScript Injection via Own Property Check Bypass","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-p8wg-vrv2-v86f","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106445","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-p8wg-vrv2-v86f"}
{"incident_id":"SEA-GHSA-pc36-qwjq-x68c","evidence_tier":"security_advisory","title":"docling issue could reach internal services","summary":"When remote fetching is enabled (enableremotefetch=True, together with fetchimages=True or HTML renderpage=True), docling's protection against requests to private and loopback addresses can be bypassed.","organization":"docling project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-pc36-qwjq-x68c","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-105743","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-pc36-qwjq-x68c"}
{"incident_id":"SEA-GHSA-pc5q-qfxp-ggqv","evidence_tier":"security_advisory","title":"Security issue reported in github.com/corazawaf/coraza/v3","summary":"The t:jsDecode transformation in Coraza WAF contains an off-by-one error when parsing octal escape sequences. A backslash character was incorrectly included in the octal number buffer, causing strconv.ParseInt to fail…","organization":"github.com/corazawaf/coraza/v3 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-pc5q-qfxp-ggqv","failure_patterns":"","capabilities":"auth.privileged_action;data.credentials_secrets;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104774","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-pc5q-qfxp-ggqv"}
{"incident_id":"SEA-GHSA-pfvf-fwfp-25mp","evidence_tier":"security_advisory","title":"Security issue reported in strawberry-graphql","summary":"PermissionExtension.resolve() evaluates the return value of haspermission() for truthiness on the synchronous path. supportssync only classifies a permission as asynchronous when haspermission is declared with async def…","organization":"strawberry-graphql project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-pfvf-fwfp-25mp","failure_patterns":"","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107728","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-pfvf-fwfp-25mp"}
{"incident_id":"SEA-GHSA-pfwj-2f93-rf42","evidence_tier":"security_advisory","title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-pfwj-2f93-rf42","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-70007","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-pfwj-2f93-rf42"}
{"incident_id":"SEA-GHSA-phv8-wgjp-g4p9","evidence_tier":"security_advisory","title":"copyparty issue could expose restricted files","summary":"The FTP and FTPS server -- if enabled -- would allow uploading to any folder that the copyparty process had permission to write to.","organization":"copyparty project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"copyparty FTP: upload outside defined volumes (limited path traversal)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-phv8-wgjp-g4p9","failure_patterns":"SEA-FM-002","capabilities":"auth.privileged_action;auth.write_action;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-104102","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-phv8-wgjp-g4p9"}
{"incident_id":"SEA-GHSA-pqf9-h8g4-8gmh","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"The authenticated v2 CSV migration route caps upload bytes but not parsed row cardinality. It reads every record into a [][]string and then materializes a full task object for every row before insertion.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Unbounded CSV row cardinality permits API process termination","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-pqf9-h8g4-8gmh","failure_patterns":"","capabilities":"data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-91969","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-pqf9-h8g4-8gmh"}
{"incident_id":"SEA-GHSA-pvgv-gcp7-v38g","evidence_tier":"security_advisory","title":"github.com/0xJacky/Nginx-UI issue could expose accounts or credentials","summary":"nginx-ui's Node.Secret is a master credential that bypasses all JWT/password authentication for the entire API. The application accepts this credential via a URL query parameter (?nodesecret=), causing it to be recorded…","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: Node Secret Credential Exposure via URL Query Parameter","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-pvgv-gcp7-v38g","failure_patterns":"SEA-FM-012","capabilities":"auth.infrastructure_modification;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-107807","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-pvgv-gcp7-v38g"}
{"incident_id":"SEA-GHSA-pw5q-rjx4-7f7p","evidence_tier":"security_advisory","title":"github.com/getarcaneapp/arcane/backend/v2 issue could expose accounts or credentials","summary":"A user holding the delegated users:update permission can reset the global administrator's password and take over the admin account.","organization":"github.com/getarcaneapp/arcane/backend/v2 project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-pw5q-rjx4-7f7p","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-96627","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-pw5q-rjx4-7f7p"}
{"incident_id":"SEA-GHSA-q2xc-rrxj-58x9","evidence_tier":"security_advisory","title":"Security issue reported in pydantic-ai","summary":"The Pydantic AI development web chat UI (Agent.toweb(), clai web) does not validate the Host header of incoming requests. A website a developer visits can use DNS rebinding to make requests to a chat UI running on that…","organization":"pydantic-ai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Pydantic AI Web chat UI (Agent.to_web(), clai web): the local chat endpoint does not validate the Host header","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-q2xc-rrxj-58x9","failure_patterns":"SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107292","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-q2xc-rrxj-58x9"}
{"incident_id":"SEA-GHSA-q6wp-fr43-gm9v","evidence_tier":"security_advisory","title":"contao/core-bundle issue could allow unauthorized access","summary":"core-bundle/config/services.yaml registers the preview access voter with the class Contao\\CoreBundle\\Security\\Voter\\DataContainer\\PreviewAccessVoter, but the class shipped on disk is named PreviewVoter.","organization":"contao/core-bundle project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Contao: Improper access control in the preview links module","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-q6wp-fr43-gm9v","failure_patterns":"SEA-FM-003","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-107850","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-q6wp-fr43-gm9v"}
{"incident_id":"SEA-GHSA-q7m5-3jmv-vm48","evidence_tier":"security_advisory","title":"Security issue reported in praisonai","summary":"PraisonAI's praisonai.ui.context.ContextGatherer treats the configured directory as the project workspace, but project-controlled .praisoncontext and .praisoninclude files can name absolute paths or .. traversal paths.","organization":"praisonai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-q7m5-3jmv-vm48","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-61431","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-q7m5-3jmv-vm48"}
{"incident_id":"SEA-GHSA-q7pc-356p-hggc","evidence_tier":"security_advisory","title":"github.com/drakkan/sftpgo/v2 issue could make the service unavailable","summary":"A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.","organization":"github.com/drakkan/sftpgo/v2 project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"SFTPGo: Denial of service via malformed SSH channel request","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-q7pc-356p-hggc","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-77375","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-q7pc-356p-hggc"}
{"incident_id":"SEA-GHSA-qfwc-vx6f-3g6g","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"A user who has only read permission on a project can call the single link-share read endpoint and receive the share's hash field — the secret credential that the anonymous POST /shares/{share}/auth endpoint exchanges for…","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-qfwc-vx6f-3g6g","failure_patterns":"SEA-FM-012","capabilities":"auth.privileged_action;auth.write_action;data.pii;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-91985","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-qfwc-vx6f-3g6g"}
{"incident_id":"SEA-GHSA-qfxx-c367-67f8","evidence_tier":"security_advisory","title":"Security issue reported in @appium/support","summary":"This finding is a different vector that the 7.0.6 fix does not cover. The archive entry names here are completely legitimate (for example pwn and pwn/owned.txt, no .. anywhere), so every name based defense accepts them.","organization":"@appium/support project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Appium: Symlink based Zip Slip in @appium/support ZIP extraction","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-qfxx-c367-67f8","failure_patterns":"SEA-FM-002","capabilities":"arch.content_ingestion_rag","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-103975","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-qfxx-c367-67f8"}
{"incident_id":"SEA-GHSA-qg25-6gc4-48mg","evidence_tier":"security_advisory","title":"praisonaiagents issue could reach internal services","summary":"PraisonAI's webcrawl agent tool performs a server-side HTTP fetch of an agent/attacker-influenced URL. SSRF is meant to be prevented by issafecrawlurl(), which resolves the hostname and rejects…","organization":"praisonaiagents project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: DNS rebinding bypass in web_crawl SSRF protection allows internal response disclosure","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-qg25-6gc4-48mg","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-61430","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-qg25-6gc4-48mg"}
{"incident_id":"SEA-GHSA-qhrr-8q5h-9q3h","evidence_tier":"security_advisory","title":"Security issue reported in MessagePack","summary":"MessagePack-CSharp is vulnerable to denial of service through excessive memory allocation when deserializing attacker-controlled data into System.Object.","organization":"MessagePack project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"MessagePack: Nested arrays can blow past buffer length limits","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-qhrr-8q5h-9q3h","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-92707","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-qhrr-8q5h-9q3h"}
{"incident_id":"SEA-GHSA-qj98-gp63-54xj","evidence_tier":"security_advisory","title":"github.com/dgraph-io/dgraph/v25 issue could make the service unavailable","summary":"Dgraph v25.3.8 exposes a Zero HTTP administrative surface that is unauthenticated when port 6080 is reachable.","organization":"github.com/dgraph-io/dgraph/v25 project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-qj98-gp63-54xj","failure_patterns":"SEA-FM-006","capabilities":"auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-102748","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-qj98-gp63-54xj"}
{"incident_id":"SEA-GHSA-qjpp-gffx-2wm9","evidence_tier":"security_advisory","title":"github.com/nezhahq/nezha issue could make the service unavailable","summary":"A single low-privilege RoleMember can take the entire Nezha dashboard offline, and with it every tenant's web UI, REST API, and agent connections, by racing two ordinary operations on their own service.","organization":"github.com/nezhahq/nezha project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-qjpp-gffx-2wm9","failure_patterns":"SEA-FM-006;SEA-FM-010","capabilities":"arch.async_job;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-100394","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-qjpp-gffx-2wm9"}
{"incident_id":"SEA-GHSA-qjpx-jqm5-h2c4","evidence_tier":"security_advisory","title":"Microsoft.AspNetCore.Components.WebAssembly.Server issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.WebAssembly.Server.","organization":"Microsoft.AspNetCore.Components.WebAssembly.Server project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-qjpx-jqm5-h2c4","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-96230","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-qjpx-jqm5-h2c4"}
{"incident_id":"SEA-GHSA-qjw5-xwrp-xwpq","evidence_tier":"security_advisory","title":"Security issue reported in praisonaiagents","summary":"praisonaiagents automatically reads project-local .praisonai/config.toml defaults when constructing an Agent. A repository-controlled config can set defaults.output.outputfile to an absolute path or a .. traversal path.","organization":"praisonaiagents project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: Project config can auto-save agent output outside the project root","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-qjw5-xwrp-xwpq","failure_patterns":"SEA-FM-010","capabilities":"auth.privileged_action;auth.write_action;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-60089","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-qjw5-xwrp-xwpq"}
{"incident_id":"SEA-GHSA-r223-96jv-q533","evidence_tier":"security_advisory","title":"generator-jhipster issue could expose or alter stored data","summary":"Every reactive (Spring WebFlux + Spring Data R2DBC + SQL) application generated by generator-jhipster contains an SQL injection in the paginated entity list endpoints (GET /api/?sort=...).","organization":"generator-jhipster project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-r223-96jv-q533","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-107375","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-r223-96jv-q533"}
{"incident_id":"SEA-GHSA-r3rv-jm3r-62q2","evidence_tier":"security_advisory","title":"mariadb issue could expose or alter stored data","summary":"When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode.","organization":"mariadb project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-r3rv-jm3r-62q2","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-107385","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-r3rv-jm3r-62q2"}
{"incident_id":"SEA-GHSA-r44w-v6gf-x3p6","evidence_tier":"security_advisory","title":"pyload-ng issue could allow unauthorized access","summary":"The API-key cache in checkapikey() allows an attacker to authenticate with a forged API key as long as the legitimate key for the same keyid has been used recently.","organization":"pyload-ng project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"pyLoad has an authentication bypass in API key validation (check_apikey cache)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-r44w-v6gf-x3p6","failure_patterns":"SEA-FM-003","capabilities":"data.credentials_secrets;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-r44w-v6gf-x3p6"}
{"incident_id":"SEA-GHSA-r7x5-4969-99p7","evidence_tier":"security_advisory","title":"Security issue reported in github.com/xuri/excelize/v2","summary":"GetSlicers guards only if ws.ExtLst == nil { return } (slicer.go:816-818) and then immediately dereferences ws.Drawing.RID with no nil check on ws.Drawing itself.","organization":"github.com/xuri/excelize/v2 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-r7x5-4969-99p7","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107213","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-r7x5-4969-99p7"}
{"incident_id":"SEA-GHSA-r955-8q5j-3h83","evidence_tier":"security_advisory","title":"System.Security.Cryptography.Xml issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml; System.Private.Xml.","organization":"System.Security.Cryptography.Xml project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-r955-8q5j-3h83","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-96958","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-r955-8q5j-3h83"}
{"incident_id":"SEA-GHSA-rj39-cv6w-8wv7","evidence_tier":"security_advisory","title":"Security issue reported in github.com/getkin/kin-openapi","summary":"kin-openapi guards against NaN and Inf values in its built-in schema visitor (visitJSON) by returning ErrSchemaInputNaN / ErrSchemaInputInf when a float64 input violates those constraints.","organization":"github.com/getkin/kin-openapi project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-rj39-cv6w-8wv7","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-100352","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-rj39-cv6w-8wv7"}
{"incident_id":"SEA-GHSA-rj9j-8772-4h6c","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"The task-collection endpoint GET /api/v1/projects/{project}/views/{view}/tasks loads the requested project view straight from the URL path without verifying the caller is authorized for it.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-rj9j-8772-4h6c","failure_patterns":"","capabilities":"auth.infrastructure_modification;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-68582","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-rj9j-8772-4h6c"}
{"incident_id":"SEA-GHSA-rp3h-jf77-q9p4","evidence_tier":"security_advisory","title":"github.com/containerd/containerd/v2 issue could make the service unavailable","summary":"A vulnerability exists in containerd's layer unpack handler where the processing of certain image layers causes superlinear time complexity.","organization":"github.com/containerd/containerd/v2 project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"containerd: Unpack DoS via repeated opaque whiteouts","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-rp3h-jf77-q9p4","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-95838","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-rp3h-jf77-q9p4"}
{"incident_id":"SEA-GHSA-rp9v-7xv3-r6g3","evidence_tier":"security_advisory","title":"github.com/corazawaf/coraza/v3 issue could make the service unavailable","summary":"defer temp.Close() sits inside a for loop in the multipart processor. Go defers run at function return, not loop end, so every file part in the request holds an open fd until ProcessRequest() exits.","organization":"github.com/corazawaf/coraza/v3 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-rp9v-7xv3-r6g3","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107834","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-rp9v-7xv3-r6g3"}
{"incident_id":"SEA-GHSA-v2j5-22fr-j62r","evidence_tier":"security_advisory","title":"Security issue reported in org.asynchttpclient:async-http-client","summary":"The fix for GHSA-vvp4-63h8-v5pm in 3.0.13 folded the authenticated principal into the HTTP/1.1 connection pool key, so that a connection one principal authenticated with NTLM, Kerberos or SPNEGO is not handed to another.","organization":"org.asynchttpclient:async-http-client project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-v2j5-22fr-j62r","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107230","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-v2j5-22fr-j62r"}
{"incident_id":"SEA-GHSA-v2xh-2vp8-57h8","evidence_tier":"security_advisory","title":"Security issue reported in pydantic-ai","summary":"Several remote-content download paths in Pydantic AI buffered the entire HTTP response body into memory before enforcing any size limit.","organization":"pydantic-ai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-v2xh-2vp8-57h8","failure_patterns":"SEA-FM-006","capabilities":"data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107294","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-v2xh-2vp8-57h8"}
{"incident_id":"SEA-GHSA-v36g-jcw9-x7cw","evidence_tier":"security_advisory","title":"Security issue reported in pydantic-ai","summary":"Applications using Pydantic AI's local web-fetch tool can experience excessive CPU and memory use when it converts attacker-controlled HTML. An agent must fetch the affected page;","organization":"pydantic-ai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Pydantic AI: Excessive resource use when local web fetching converts nested HTML","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-v36g-jcw9-x7cw","failure_patterns":"SEA-FM-010","capabilities":"arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107287","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-v36g-jcw9-x7cw"}
{"incident_id":"SEA-GHSA-v383-3rw5-q8rf","evidence_tier":"security_advisory","title":"enshrined/svg-sanitize issue could make the service unavailable","summary":"A crafted SVG file (1009 bytes) crashes the PHP process when sanitized by enshrined/svg-sanitize (any version through 0.22.x).","organization":"enshrined/svg-sanitize project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-v383-3rw5-q8rf","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107379","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-v383-3rw5-q8rf"}
{"incident_id":"SEA-GHSA-v3ph-cgqh-r8p5","evidence_tier":"security_advisory","title":"Security issue reported in github.com/dunglas/frankenphp","summary":"In worker mode under concurrency, FrankenPHP can hand a PHP session id from one request to another when PHP's session extension is loaded as a shared module instead of being statically linked into the FrankenPHP binary.","organization":"github.com/dunglas/frankenphp project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-v3ph-cgqh-r8p5","failure_patterns":"","capabilities":"arch.async_job","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-82416","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-v3ph-cgqh-r8p5"}
{"incident_id":"SEA-GHSA-v5mq-3xhg-98m9","evidence_tier":"security_advisory","title":"unstructured issue could run attacker-controlled scripts in a browser","summary":"When unstructured parses an untrusted document and outputs the result as HTML, malicious markup contained in the document (e.g. ) is left in the output HTML without escaping.","organization":"unstructured project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"unstructured: Stored XSS via unescaped HTML generation","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-v5mq-3xhg-98m9","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-104250","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-v5mq-3xhg-98m9"}
{"incident_id":"SEA-GHSA-v6pj-gxxw-phfw","evidence_tier":"security_advisory","title":"mariadb issue could expose or alter stored data","summary":"With the non-default permitSetMultiParamEntries option enabled, an object passed as a query parameter is expanded into a SET clause, each key becoming a column name.","organization":"mariadb project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-v6pj-gxxw-phfw","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Parameterise and validate untrusted input: Use parameterised queries/typed tool schemas and reject input that does not match an explicit schema.","cve_references":"CVE-2026-107384","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-v6pj-gxxw-phfw"}
{"incident_id":"SEA-GHSA-vfxw-3x8p-2vjr","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"A link-share token, the credential you hand out to let someone view a shared project, can call the v2 user-search endpoints, which it was never meant to reach.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Link-share token can enumerate users through the v2 API","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-vfxw-3x8p-2vjr","failure_patterns":"SEA-FM-012","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Scope, rotate and redact secrets: Use short-lived, least-privilege tokens, redact secrets from logs and errors, and rotate on suspected exposure.","cve_references":"CVE-2026-91981","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-vfxw-3x8p-2vjr"}
{"incident_id":"SEA-GHSA-vgf9-9mxx-hq54","evidence_tier":"security_advisory","title":"ClickMigrate issue could expose restricted files","summary":"A path traversal vulnerability in the revision command allowed a crafted migration name supplied via the -m argument to escape the intended migrations directory.","organization":"ClickMigrate project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"ClickMigrate has Path Traversal in \"revision -m\" argument","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-vgf9-9mxx-hq54","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-68549","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-vgf9-9mxx-hq54"}
{"incident_id":"SEA-GHSA-vmxc-h2x2-jmf3","evidence_tier":"security_advisory","title":"pydantic-ai issue could reach internal services","summary":"When an application using Pydantic AI opts a URL into local network access — either a FileUrl with forcedownload='allow-local', or webfetchtool(allowlocalurls=True) — the cloud-metadata blocklist could be bypassed by…","organization":"pydantic-ai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-vmxc-h2x2-jmf3","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Restrict outbound requests: Resolve and allow-list outbound destinations, block private and link-local ranges, and strip credentials from proxied requests.","cve_references":"CVE-2026-107289","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-vmxc-h2x2-jmf3"}
{"incident_id":"SEA-GHSA-vq8p-m3wm-gv5f","evidence_tier":"security_advisory","title":"pyload-ng issue could make the service unavailable","summary":"The API rpc function in apiblueprint.py handles multipart/form-data uploads by reading the whole content of the uploaded file into memory with file.read(). This occurs before the data is sent to the underlying function.","organization":"pyload-ng project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-vq8p-m3wm-gv5f","failure_patterns":"SEA-FM-006","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-48484","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-vq8p-m3wm-gv5f"}
{"incident_id":"SEA-GHSA-vqff-r82h-9crc","evidence_tier":"security_advisory","title":"Security issue reported in @aborruso/ckan-mcp-server","summary":"The MCP Apps UI resource (an interactive DataStore table rendered in the host's webview/iframe) communicates with its parent via postMessage.","organization":"@aborruso/ckan-mcp-server project","incident_date":"2026-10-16","date_basis":"","source_type":"cve_advisory","source_title":"ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin \"\" (out)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-vqff-r82h-9crc","failure_patterns":"SEA-FM-010","capabilities":"arch.event_driven;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-76894","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-vqff-r82h-9crc"}
{"incident_id":"SEA-GHSA-vrcc-3ch7-hppw","evidence_tier":"security_advisory","title":"Security issue reported in github.com/getkin/kin-openapi","summary":"The fix for GHSA-p6wj-qrr4-pgh5 addressed a nil-pointer dereference that occurs when an OpenAPI 3.1 array schema omits the items keyword (which is legal under JSON Schema 2020-12).","organization":"github.com/getkin/kin-openapi project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-vrcc-3ch7-hppw","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-100353","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-vrcc-3ch7-hppw"}
{"incident_id":"SEA-GHSA-vrrp-6v32-2p8g","evidence_tier":"security_advisory","title":"Microsoft.AspNetCore.Authentication.Negotiate issue could grant elevated privileges","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Authentication.Negotiate.","organization":"Microsoft.AspNetCore.Authentication.Negotiate project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-vrrp-6v32-2p8g","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-70179","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-vrrp-6v32-2p8g"}
{"incident_id":"SEA-GHSA-vrv5-2jg9-4mmr","evidence_tier":"security_advisory","title":"Security issue reported in System.Security.Cryptography.Xml","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Security.Cryptography.Xml.","organization":"System.Security.Cryptography.Xml project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-vrv5-2jg9-4mmr","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-96222","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-vrv5-2jg9-4mmr"}
{"incident_id":"SEA-GHSA-w253-m66g-rx24","evidence_tier":"security_advisory","title":"Security issue reported in github.com/corazawaf/coraza/v3","summary":"Coraza fails to inspect URL-encoded form bodies when their valid Content-Type contains a media-type parameter, for example:","organization":"github.com/corazawaf/coraza/v3 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Coraza: URL-encoded form Content-Type parameters bypass Coraza body inspection","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-w253-m66g-rx24","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-w253-m66g-rx24"}
{"incident_id":"SEA-GHSA-w294-6q5q-53p8","evidence_tier":"security_advisory","title":"com.hazelcast:hazelcast issue could allow unauthorized access","summary":"Missing authorization checks in the Predicates API may allow a malicious client to execute arbitrary code on a Hazelcast member.","organization":"com.hazelcast:hazelcast project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Hazelcast has an authorization bypass in IMap Predicates API","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-w294-6q5q-53p8","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-107725","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-w294-6q5q-53p8"}
{"incident_id":"SEA-GHSA-w2ch-4xgr-22ww","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"Deleting a task relation only requires write access on the base task. Unlike relation creation, it does not verify that the caller can read the other task.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-w2ch-4xgr-22ww","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action;data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-w2ch-4xgr-22ww"}
{"incident_id":"SEA-GHSA-w39f-h553-h2mx","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"The task-position endpoint authorizes only the task side of the write: TaskPosition.CanUpdate delegates to Task.CanUpdate (write access to the task's own project) and the request body's projectviewid is never validated…","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2)","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-w39f-h553-h2mx","failure_patterns":"SEA-FM-003","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Server-side authorization on every object: Check the authenticated principal against the target record on every read and write; add cross-tenant negative tests.","cve_references":"CVE-2026-91984","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-w39f-h553-h2mx"}
{"incident_id":"SEA-GHSA-w5qq-qrpp-rf4c","evidence_tier":"security_advisory","title":"Microsoft.AspNetCore.App.Runtime.linux-arm issue could make the service unavailable","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.WebUtilities.","organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-w5qq-qrpp-rf4c","failure_patterns":"SEA-FM-006","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-70181","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-w5qq-qrpp-rf4c"}
{"incident_id":"SEA-GHSA-w6r9-248c-frg8","evidence_tier":"security_advisory","title":"Security issue reported in github.com/rabbitmq/amqp091-go","summary":"The frame-size mitigation released in amqp091-go v1.13.0 can be bypassed before connection.tune completes. A malicious or compromised AMQP peer can send only a seven-byte body-frame header containing a large…","organization":"github.com/rabbitmq/amqp091-go project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"amqp091-go: Pre-negotiation frame limit is not enforced to 4KB","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-w6r9-248c-frg8","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107386","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-w6r9-248c-frg8"}
{"incident_id":"SEA-GHSA-w6wh-p4g7-mpj2","evidence_tier":"security_advisory","title":"Microsoft.NETCore.App.Runtime.linux-arm issue could grant elevated privileges","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.NETCore.App.Runtime; System.Private.CoreLib.","organization":"Microsoft.NETCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-w6wh-p4g7-mpj2","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-96225","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-w6wh-p4g7-mpj2"}
{"incident_id":"SEA-GHSA-w7jp-mf2v-8342","evidence_tier":"security_advisory","title":"code.vikunja.io/api issue could make the service unavailable","summary":"Vikunja lets you export your data as a zip and import it back. The import doesn't limit how large the archive expands to, how many files it contains, or how much storage one user can consume, and it appears to hold the…","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Denial of service via decompression bomb in the data import","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-w7jp-mf2v-8342","failure_patterns":"SEA-FM-006","capabilities":"data.pii","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-91979","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-w7jp-mf2v-8342"}
{"incident_id":"SEA-GHSA-wf65-4jjx-q444","evidence_tier":"security_advisory","title":"Security issue reported in praisonai","summary":"The PGVector and Cassandra knowledge-store backends validate SQL/CQL identifiers such as schema, keyspace, and collection names, but still insert the caller-controlled dimension argument directly into CREATE TABLE vector…","organization":"praisonai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-wf65-4jjx-q444","failure_patterns":"","capabilities":"auth.write_action;arch.content_ingestion_rag","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-60090","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-wf65-4jjx-q444"}
{"incident_id":"SEA-GHSA-wq4w-vwvq-q3x9","evidence_tier":"security_advisory","title":"Security issue reported in github.com/0xJacky/Nginx-UI","summary":"Standalone short tokens issued for WebSocket and explicit-token authentication can survive administrative revocation in cache.","organization":"github.com/0xJacky/Nginx-UI project","incident_date":"2026-10-15","date_basis":"","source_type":"cve_advisory","source_title":"Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-wq4w-vwvq-q3x9","failure_patterns":"","capabilities":"auth.destructive_action;arch.caching;arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-84321","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-wq4w-vwvq-q3x9"}
{"incident_id":"SEA-GHSA-wq92-8x3r-fm38","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"The always-registered Planka migration lets any ordinary user select a Planka server. Although Vikunja caps each JSON response, pagination loop, and attachment independently, it has no aggregate job budget.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-wq92-8x3r-fm38","failure_patterns":"","capabilities":"data.pii;data.uploaded_files","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-91970","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-wq92-8x3r-fm38"}
{"incident_id":"SEA-GHSA-ww5h-9m49-7xx4","evidence_tier":"security_advisory","title":"Security issue reported in fast-jwt","summary":"The fix for CVE-2026-34950 (CVSS 9.1, released in v6.2.0) is incomplete. It adds key.trim() to the PEM-detection path in src/crypto.js, but String.prototype.trim() only strips characters classified as whitespace by the…","organization":"fast-jwt project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-ww5h-9m49-7xx4","failure_patterns":"","capabilities":"auth.financial_action;data.financial_records;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107722","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-ww5h-9m49-7xx4"}
{"incident_id":"SEA-GHSA-wxxw-5cvc-53j7","evidence_tier":"security_advisory","title":"Security issue reported in Microsoft.NETCore.App.Runtime.linux-arm","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this…","organization":"Microsoft.NETCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-wxxw-5cvc-53j7","failure_patterns":"","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-66822","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-wxxw-5cvc-53j7"}
{"incident_id":"SEA-GHSA-x26q-wvhg-fh4m","evidence_tier":"security_advisory","title":"Security issue reported in github.com/corazawaf/coraza/v3","summary":"File: internal/corazawaf/transaction.go, lines 834–866.","organization":"github.com/corazawaf/coraza/v3 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Coraza: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-x26q-wvhg-fh4m","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107825","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-x26q-wvhg-fh4m"}
{"incident_id":"SEA-GHSA-x2q3-8cjh-766f","evidence_tier":"security_advisory","title":"github.com/xuri/excelize/v2 issue could make the service unavailable","summary":"extractPart allocates directly from the mscfb directory-entry size with no clamping (crypt.go:198, same missing bound at crypt.go:204):","organization":"github.com/xuri/excelize/v2 project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-x2q3-8cjh-766f","failure_patterns":"SEA-FM-006","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107215","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-x2q3-8cjh-766f"}
{"incident_id":"SEA-GHSA-x3q2-h9hx-4r4j","evidence_tier":"security_advisory","title":"docling issue could expose restricted files","summary":"When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine (LatexBackendOptions(tikzengine=\"tectonic\")), the TikZ body and the document preamble from the input file are compiled by Tectonic…","organization":"docling project","incident_date":"2026-10-07","date_basis":"","source_type":"cve_advisory","source_title":"Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-x3q2-h9hx-4r4j","failure_patterns":"SEA-FM-002","capabilities":"auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Confine file access to a fixed root: Resolve paths to canonical form and reject anything outside the intended directory before opening files.","cve_references":"CVE-2026-105744","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-x3q2-h9hx-4r4j"}
{"incident_id":"SEA-GHSA-x3vp-85cm-q97r","evidence_tier":"security_advisory","title":"Microsoft.AspNetCore.App.Runtime.linux-arm issue could grant elevated privileges","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Identity and Microsoft.AspNetCore.Identity.UI.","organization":"Microsoft.AspNetCore.App.Runtime.linux-arm project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-x3vp-85cm-q97r","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce privilege boundaries in code: Require explicit, server-verified authorization for privileged operations and isolate components with separate identities.","cve_references":"CVE-2026-70175","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-x3vp-85cm-q97r"}
{"incident_id":"SEA-GHSA-x8v2-478q-2hvg","evidence_tier":"security_advisory","title":"org.asynchttpclient:async-http-client issue could make the service unavailable","summary":"With WebSocket compression enabled, the client inflates permessage-deflate messages with no limit on the decompressed size.","organization":"org.asynchttpclient:async-http-client project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-x8v2-478q-2hvg","failure_patterns":"SEA-FM-006","capabilities":"arch.event_driven","is_ai_system":false,"is_agentic":false,"safeguards":"Bound input size, depth and time: Enforce request size and nesting limits, per-request timeouts and rate limits; isolate workloads and add circuit breakers.","cve_references":"CVE-2026-107227","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-x8v2-478q-2hvg"}
{"incident_id":"SEA-GHSA-x937-hj6v-793p","evidence_tier":"security_advisory","title":"Security issue reported in fast-jwt","summary":"cacheSet only derives its exp cache deadline inside hasIat (src/verifier.js:127-140). JWT iat is optional. For a valid token with exp but no iat, cacheSet substitutes clockTimestamp + clockTolerance + cacheTTL…","organization":"fast-jwt project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"fast-jwt: Verifier cache accepts expired JWTs without iat.","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-x937-hj6v-793p","failure_patterns":"","capabilities":"data.credentials_secrets;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-107719","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-x937-hj6v-793p"}
{"incident_id":"SEA-GHSA-xpx6-x8c2-mw5w","evidence_tier":"security_advisory","title":"Security issue reported in praisonai","summary":"PraisonAI's new file-based custom command feature auto-discovers project commands from .praisonai/commands/.md. When a user runs praisonai run --command inside a repository, the command body is interpolated before it is…","organization":"praisonai project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: Project custom command templates can read outside-workspace files into model prompts","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-xpx6-x8c2-mw5w","failure_patterns":"","capabilities":"data.pii;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-60088","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-xpx6-x8c2-mw5w"}
{"incident_id":"SEA-GHSA-xq57-crx4-g373","evidence_tier":"security_advisory","title":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 issue could allow unintended commands to run","summary":"Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime (WPF).","organization":"Microsoft.WindowsDesktop.App.Runtime.win-arm64 project","incident_date":"2026-10-13","date_basis":"","source_type":"cve_advisory","source_title":"Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-xq57-crx4-g373","failure_patterns":"SEA-FM-002","capabilities":"auth.destructive_action;auth.write_action","is_ai_system":false,"is_agentic":false,"safeguards":"Allow-list inputs and isolate execution: Never build commands from caller-controlled strings; validate arguments against an allow-list and execute inside a least-privilege sandbox.","cve_references":"CVE-2026-96224","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-xq57-crx4-g373"}
{"incident_id":"SEA-GHSA-xw65-4hp5-5hc7","evidence_tier":"security_advisory","title":"Security issue reported in handlebars","summary":"Handlebars.precompile() generates JavaScript source that is commonly embedded in browser elements. Before the fix, static template text containing was emitted unchanged.","organization":"handlebars project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-xw65-4hp5-5hc7","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-106444","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-xw65-4hp5-5hc7"}
{"incident_id":"SEA-GHSA-xxc3-xpmc-vmvr","evidence_tier":"security_advisory","title":"Security issue reported in code.vikunja.io/api","summary":"Authenticated task-list routes accept a filter expression without a length or nesting-depth bound, preprocess it, parse it recursively through fexpr, and recursively convert the resulting expression tree.","organization":"code.vikunja.io/api project","incident_date":"2026-10-09","date_basis":"","source_type":"cve_advisory","source_title":"Vikunja: Unbounded nested task-filter recursion permits API process termination","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-xxc3-xpmc-vmvr","failure_patterns":"","capabilities":"auth.write_action;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-91968","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-xxc3-xpmc-vmvr"}
{"incident_id":"SEA-GHSA-xxgv-vgvj-qvxh","evidence_tier":"security_advisory","title":"Security issue reported in praisonai-platform","summary":"praisonai-platform lets an ordinary workspace member rename and recolor shared labels and add/remove labels on an owner-created issue even though direct label deletion is restricted to workspace admin/owner authority in…","organization":"praisonai-platform project","incident_date":"2026-10-08","date_basis":"","source_type":"cve_advisory","source_title":"PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization","source_publisher":"GitHub Security Advisory Database","source_url":"https://github.com/advisories/GHSA-xxgv-vgvj-qvxh","failure_patterns":"","capabilities":"auth.destructive_action;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Track and patch dependencies: Monitor advisories for components you depend on and upgrade to a fixed version.","cve_references":"CVE-2026-61440","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-GHSA-xxgv-vgvj-qvxh"}
{"incident_id":"SEA-POST-001","evidence_tier":"documented_incident","title":"Design reference: idempotency keys make retried payment API calls safe (Stripe)","summary":"Stripe explains that a client which cannot tell whether a request succeeded (for example after a network failure) needs to retry safely, and that without protection a retried charge could double-charge a customer.","organization":"Stripe","incident_date":"2017-02-22","date_basis":"publication","source_type":"vendor_postmortem","source_title":"Designing robust and predictable APIs with idempotency","source_publisher":"Stripe","source_url":"https://stripe.com/blog/idempotency","failure_patterns":"SEA-FM-001","capabilities":"auth.financial_action;arch.external_api;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Attach idempotency keys to state-changing requests: Store the result of the first request under the key and return it for retries so a retried charge is never applied twice. | Treat timeouts as unknown, not failed: Reconcile with the server before repeating an operation whose outcome is unknown.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-001"}
{"incident_id":"SEA-POST-002","evidence_tier":"documented_incident","title":"Design reference: AWS guidance on timeouts, retries and backoff with jitter","summary":"AWS describes retries as powerful but dangerous: when a dependency is struggling, too many retries can amplify load and turn a partial failure into a retry storm.","organization":"Amazon Web Services","incident_date":"2024-03-15","date_basis":"unknown","source_type":"vendor_postmortem","source_title":"Timeouts, retries, and backoff with jitter","source_publisher":"Amazon Web Services (Builders' Library)","source_url":"https://aws.amazon.com/builders-library/timeouts-retries-and-backoff-with-jitter/","failure_patterns":"SEA-FM-006","capabilities":"auth.infrastructure_modification;arch.external_api;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Use capped exponential backoff with jitter: Spread retries over time and cap attempts so clients do not synchronise into a storm. | Retry at one layer with a budget: Avoid multiplying retries across layers; bound retries with a budget relative to normal traffic.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-002"}
{"incident_id":"SEA-POST-004","evidence_tier":"documented_incident","title":"Blank provisioning parameter leads to automatic deletion of a customer's private cloud (UniSuper / Google Cloud, 2024)","summary":"An input parameter was left blank in an internal provisioning tool, so the system assigned an unknown default fixed one-year term to the customer's VMware Private Cloud.","organization":"Google Cloud (UniSuper)","incident_date":"2024-05-24","date_basis":"disclosure","source_type":"vendor_postmortem","source_title":"Sharing details on a recent incident impacting one of our customers","source_publisher":"Google Cloud","source_url":"https://cloud.google.com/blog/products/infrastructure/details-of-google-cloud-gcve-incident","failure_patterns":"SEA-FM-005;SEA-FM-008","capabilities":"auth.destructive_action;auth.infrastructure_modification;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Never let a blank input silently choose a default lifetime: Require explicit values for expiry and deletion parameters, and reject missing ones. | Soft-delete with grace periods and independent backups: Delay irreversible deletion, notify the customer, and keep backups in an independent location.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-004"}
{"incident_id":"SEA-POST-005","evidence_tier":"documented_incident","title":"Database permissions change doubles a bot-management feature file and crashes edge proxies (Cloudflare, 2025)","summary":"A ClickHouse access-control change made table permissions explicit, so a query without a database filter returned duplicate rows and doubled the size of the Bot Management feature file.","organization":"Cloudflare","incident_date":"2025-11-18","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Cloudflare outage on November 18, 2025","source_publisher":"Cloudflare","source_url":"https://blog.cloudflare.com/18-november-2025-outage/","failure_patterns":"SEA-FM-011;SEA-FM-008","capabilities":"auth.code_execution;auth.infrastructure_modification;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Validate generated configuration before global propagation: Check size, duplicates and schema of auto-generated files, and roll out gradually with a kill switch. | Fail safe with last-known-good configuration: Consumers should reject an invalid file and keep serving with the previous good version instead of panicking.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-005"}
{"incident_id":"SEA-POST-006","evidence_tier":"documented_incident","title":"Valid customer configuration change triggers a latent software bug across a CDN (Fastly, 2021)","summary":"A software deployment on May 12, 2021 introduced a bug that a specific valid customer configuration could trigger; on June 8 a customer pushed such a change.","organization":"Fastly","incident_date":"2021-06-08","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Summary of June 8 outage","source_publisher":"Fastly","source_url":"https://www.fastly.com/blog/summary-of-june-8-outage","failure_patterns":"SEA-FM-011;SEA-FM-006","capabilities":"auth.code_execution;auth.infrastructure_modification;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Canary software changes and watch for latent bugs: Roll out to a small share of the network first and verify behaviour under real customer configurations. | Enable fast detection and rollback: Detect errors within a minute and keep a one-step way to disable the triggering configuration.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-006"}
{"incident_id":"SEA-POST-007","evidence_tier":"documented_incident","title":"Privilege escalation and a certificate-validation flaw allow cross-account database access (Azure PostgreSQL \"ExtraReplica\", 2022)","summary":"Researchers exploited a bug in Azure's modified PostgreSQL engine to gain superuser privileges and run operating-system commands on their own database instance.","organization":"Microsoft Azure","incident_date":"2022-04-29","date_basis":"publication","source_type":"vendor_postmortem","source_title":"Wiz Research discovers \"ExtraReplica\": a cross-account database vulnerability in Azure PostgreSQL","source_publisher":"Wiz Research","source_url":"https://www.wiz.io/blog/wiz-research-discovers-extrareplica-cross-account-database-vulnerability-in-azure-postgresql","failure_patterns":"SEA-FM-003;SEA-FM-002","capabilities":"auth.code_execution;arch.multi_tenant;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Validate tenant identity with strict, anchored certificate checks: Match the full identity of a client certificate rather than a loosely matched pattern, and fuzz identity parsing. | Isolate tenant containers from host networking: Give each tenant workload its own network namespace and do not grant superuser to customer-controlled roles.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-007"}
{"incident_id":"SEA-POST-008","evidence_tier":"documented_incident","title":"GitHub's RSA SSH host private key briefly exposed in a public repository (2023)","summary":"GitHub.com's RSA SSH private key was briefly exposed in a public GitHub repository.","organization":"GitHub","incident_date":"2023-03-23","date_basis":"incident","source_type":"vendor_postmortem","source_title":"We updated our RSA SSH host key","source_publisher":"GitHub","source_url":"https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/","failure_patterns":"SEA-FM-002;SEA-FM-009","capabilities":"data.credentials_secrets;auth.privileged_action;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Scan for private keys before they are published: Use pre-commit and push-time secret scanning to block private keys from leaving controlled repositories. | Protect and rotate key material: Keep host keys in a vault with access logging and have a rehearsed rotation and notification plan.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-008"}
{"incident_id":"SEA-POST-009","evidence_tier":"documented_incident","title":"Engineer deletes the production database directory and every backup method fails (GitLab, 2017)","summary":"While working on replication, an engineer ran a data-directory deletion on the production database server instead of the secondary, removing about 300 GB before stopping it.","organization":"GitLab","incident_date":"2017-01-31","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Postmortem of database outage of January 31","source_publisher":"GitLab","source_url":"https://about.gitlab.com/blog/postmortem-of-database-outage-of-january-31/","failure_patterns":"SEA-FM-005","capabilities":"auth.destructive_action;auth.infrastructure_modification;data.cross_tenant_data","is_ai_system":false,"is_agentic":false,"safeguards":"Verify backups by restoring them: Run scheduled restore tests and alert on empty or failing backup jobs; do not rely on job success alone. | Make dangerous commands hard to misdirect: Distinguish production from replicas in prompts and require confirmation for destructive operations on primaries.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-009"}
{"incident_id":"SEA-POST-010","evidence_tier":"documented_incident","title":"Deletion script given site IDs instead of app IDs removes 775 customers' sites (Atlassian, 2022)","summary":"A script meant to retire a deprecated app was given IDs for entire customer sites and did not check whether an ID referred to the app or the whole site.","organization":"Atlassian","incident_date":"2022-04-05","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Post-Incident Review: April 2022 Atlassian outage","source_publisher":"Atlassian","source_url":"https://www.atlassian.com/engineering/post-incident-review-april-2022-outage","failure_patterns":"SEA-FM-005;SEA-FM-008","capabilities":"auth.destructive_action;auth.infrastructure_modification;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Validate the scope of every ID in destructive scripts: Check whether an ID refers to an app or an entire site and require a dry-run and review before deleting. | Soft-delete and rehearse large-scale restore: Delay permanent deletion and practise restoring many customers at once.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-010"}
{"incident_id":"SEA-POST-011","evidence_tier":"documented_incident","title":"Malware steals an engineer's SSO session and exposes CircleCI customer secrets (2023)","summary":"Malware on an engineer's laptop stole a valid two-factor-backed SSO session, letting the attacker impersonate the employee and reach a subset of production systems.","organization":"CircleCI","incident_date":"2023-01-04","date_basis":"disclosure","source_type":"vendor_postmortem","source_title":"CircleCI incident report for January 4, 2023 security incident","source_publisher":"CircleCI","source_url":"https://circleci.com/blog/jan-4-2023-incident-report/","failure_patterns":"SEA-FM-012;SEA-FM-009","capabilities":"auth.code_execution;data.credentials_secrets;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Harden employee endpoints and sessions: Use device posture checks, endpoint detection and short, device-bound sessions so stolen cookies cannot be replayed. | Limit production token privileges and protect encryption keys: Avoid employees who can mint broad production tokens by default, and keep encryption keys out of extractable process memory.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-011"}
{"incident_id":"SEA-POST-012","evidence_tier":"illustrative_scenario","title":"Real-Time Message Cache Inconsistency During Large Redis Cluster Migration","summary":"Migrating message caches between Redis clusters caused race conditions and state drift between cache and Cassandra persistence layer.","organization":"Distributed Real-Time Voice/Chat Messaging & Redis Tier","incident_date":"2024-03-15","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-004;SEA-FM-007","capabilities":"arch.caching;arch.multi_tenant;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Strictly segregate external untrusted text (emails, web scrapes, user files) from model instruction channels and constrain tool tokens to least-privilege scopes.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-012"}
{"incident_id":"SEA-POST-013","evidence_tier":"illustrative_scenario","title":"Network Partition Database Failover Connection Pool Starvation","summary":"Network partition during database maintenance triggered simultaneous split-brain failovers, causing connection pool exhaustion on all API gateways.","organization":"Enterprise Collaborative Messaging & Distributed MySQL Vitess","incident_date":"2024-03-15","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-006;SEA-FM-007","capabilities":"arch.multi_tenant;auth.infrastructure_modification;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-013"}
{"incident_id":"SEA-POST-014","evidence_tier":"illustrative_scenario","title":"Viral Flash Sale Checkout Write Lock Amplification & Database Contention","summary":"Synchronized row-level inventory locks on viral merchant flash sales saturated database thread pools, causing cascading timeouts on unrelated stores.","organization":"Multi-Tenant E-Commerce Flash Sale & Inventory Lock Service","incident_date":"2024-03-15","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-006;SEA-FM-007","capabilities":"auth.financial_action;arch.multi_tenant;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-014"}
{"incident_id":"SEA-POST-015","evidence_tier":"illustrative_scenario","title":"Real-Time Collaborative Canvas WebSocket State Conflict Storm","summary":"Transient cross-region WebSocket disconnect caused client reconciliation loops to send millions of redundant state delta patches, overwhelming sync servers.","organization":"Collaborative Multi-User Canvas & Real-Time Sync Engine","incident_date":"2024-03-15","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-006;SEA-FM-004","capabilities":"arch.multi_tenant;arch.caching;auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-015"}
{"incident_id":"SEA-POST-016","evidence_tier":"documented_incident","title":"Mistyped input to a capacity-removal command takes down S3 in us-east-1 (AWS, 2017)","summary":"An engineer ran a command meant to remove a small number of servers from an S3 subsystem, but one input was entered incorrectly and more capacity was removed than intended.","organization":"Amazon Web Services","incident_date":"2017-02-28","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Summary of the Amazon S3 Service Disruption in the Northern Virginia (US-EAST-1) Region","source_publisher":"Amazon Web Services","source_url":"https://aws.amazon.com/message/41926/","failure_patterns":"SEA-FM-002;SEA-FM-006","capabilities":"auth.infrastructure_modification;auth.destructive_action;fail.cascading_dep_failure;fail.recovery_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce minimum-capacity limits inside the tool: Refuse removals that would drop a subsystem below its minimum capacity and remove capacity gradually. | Validate operator input and require a dry run: Check parameters against expected ranges and show what a destructive capacity change will affect before executing it.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-016"}
{"incident_id":"SEA-POST-017","evidence_tier":"documented_incident","title":"Latent race condition in DNS automation leaves DynamoDB's regional endpoint with an empty record (AWS, 2025)","summary":"A latent race condition in DynamoDB's DNS management system produced an empty DNS record for the regional endpoint that the automation could not repair, so clients could not resolve the endpoint.","organization":"Amazon Web Services","incident_date":"2025-10-19","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Summary of the Amazon DynamoDB Service Disruption in the Northern Virginia (US-EAST-1) Region","source_publisher":"Amazon Web Services","source_url":"https://aws.amazon.com/message/101925/","failure_patterns":"SEA-FM-008;SEA-FM-006","capabilities":"fail.stale_state;fail.cascading_dep_failure;fail.recovery_failure;auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Make control-plane automation safe against stale plans: Version and verify plans so an older plan cannot overwrite a newer one, and give operators a safe manual path to repair an empty record. | Limit how fast health failures remove capacity: Add velocity controls to dependent health checks so one dependency fault cannot cascade through the region.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-017"}
{"incident_id":"SEA-POST-018","evidence_tier":"documented_incident","title":"Policy change with blank fields crashes Google Cloud's Service Control in a global loop (2025)","summary":"A policy change containing blank fields was inserted into the quota policy system; when Service Control read it, the code path hit a null pointer and the binaries went into a crash loop.","organization":"Google Cloud","incident_date":"2025-06-12","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Google Cloud incident report: global outage of June 12, 2025","source_publisher":"Google Cloud","source_url":"https://status.cloud.google.com/incidents/ow5i3PPK96RduMcb1SsW","failure_patterns":"SEA-FM-011","capabilities":"auth.infrastructure_modification;fail.cascading_dep_failure;fail.missing_observability","is_ai_system":false,"is_agentic":false,"safeguards":"Guard risky code paths with feature flags: Ship new behaviour dark, enable it gradually and keep a fast way to turn it off. | Validate policy data before global replication: Reject blank or malformed policy fields, handle errors without crashing, and replicate changes region by region.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-018"}
{"incident_id":"SEA-POST-019","evidence_tier":"documented_incident","title":"Backbone maintenance command disconnects Facebook's data centers and locks out recovery tooling (Meta, 2021)","summary":"A command issued to assess global backbone capacity unintentionally took down all the connections in Facebook's backbone network.","organization":"Meta (Facebook)","incident_date":"2021-10-04","date_basis":"incident","source_type":"vendor_postmortem","source_title":"More details about the October 4 outage","source_publisher":"Meta Engineering","source_url":"https://engineering.fb.com/2021/10/05/networking-traffic/outage-details/","failure_patterns":"SEA-FM-011;SEA-FM-002","capabilities":"auth.infrastructure_modification;fail.recovery_failure;fail.cascading_dep_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Test the guard that is meant to stop dangerous commands: Audit tools need their own tests and a second independent check for changes that can disconnect the network. | Keep recovery paths independent of the thing being recovered: Ensure out-of-band access and DNS-independent tooling exist so a network failure does not lock operators out.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-019"}
{"incident_id":"SEA-POST-020","evidence_tier":"documented_incident","title":"43-second network partition triggers database failover and unreplicated writes (GitHub, 2018)","summary":"Network maintenance caused a 43-second loss of connectivity between GitHub's US East Coast hub and its primary data center, which led to 24 hours and 11 minutes of degraded service.","organization":"GitHub","incident_date":"2018-10-21","date_basis":"incident","source_type":"vendor_postmortem","source_title":"October 21 post-incident analysis","source_publisher":"GitHub","source_url":"https://github.blog/2018-10-30-oct21-post-incident-analysis/","failure_patterns":"SEA-FM-007;SEA-FM-008","capabilities":"fail.partial_success;fail.stale_state;arch.distributed_tx;fail.recovery_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Make automatic failover aware of replication state: Do not promote a replica in another region unless it has the writes the old primary acknowledged, or fence the old primary first. | Plan for split-brain reconciliation: Keep tooling and runbooks for detecting and reconciling divergent writes after a partition.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-020"}
{"incident_id":"SEA-POST-021","evidence_tier":"documented_incident","title":"Regular expression in a WAF rule exhausts CPU on every edge server (Cloudflare, 2019)","summary":"A new WAF managed rule for XSS detection contained a regular expression that caused catastrophic backtracking and exhausted CPU.","organization":"Cloudflare","incident_date":"2019-07-02","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Details of the Cloudflare outage on July 2, 2019","source_publisher":"Cloudflare","source_url":"https://blog.cloudflare.com/details-of-the-cloudflare-outage-on-july-2-2019/","failure_patterns":"SEA-FM-011;SEA-FM-006","capabilities":"fail.cost_resource_exhaustion;auth.infrastructure_modification;fail.cascading_dep_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Deploy rules through staged rollouts: Release new rules to a small share of traffic first and watch CPU and error rates before going global. | Bound rule execution cost: Use regex engines without catastrophic backtracking and enforce per-request CPU limits and a global kill switch.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-021"}
{"incident_id":"SEA-POST-022","evidence_tier":"documented_incident","title":"Holiday traffic surge overloads a Transit Gateway and stalls autoscaling provisioning (Slack, 2021)","summary":"After the holidays, an unusual surge of traffic from clients with cold caches overloaded one of Slack's AWS Transit Gateways.","organization":"Slack","incident_date":"2021-01-04","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Slack's Outage on January 4th 2021","source_publisher":"Slack Engineering","source_url":"https://slack.engineering/slacks-outage-on-january-4th-2021/","failure_patterns":"SEA-FM-006","capabilities":"fail.cost_resource_exhaustion;fail.cascading_dep_failure;arch.async_job;fail.missing_observability","is_ai_system":false,"is_agentic":false,"safeguards":"Load-test scale-up paths, not just steady state: Regularly exercise the provisioning service at burst scale and check OS and cloud quota limits. | Keep monitoring independent of the failing path: Place dashboards and alerting where a network-gateway failure cannot blind operators.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-022"}
{"incident_id":"SEA-POST-023","evidence_tier":"documented_incident","title":"New Consul streaming feature under heavy load and a BoltDB issue cause a 73-hour outage (Roblox, 2021)","summary":"Enabling a relatively new streaming feature in Consul under unusually high read and write load caused excessive contention, compounded by a pathological performance issue in BoltDB when handling large writes.","organization":"Roblox","incident_date":"2021-10-28","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Roblox Return to Service","source_publisher":"Roblox","source_url":"https://about.roblox.com/newsroom/2022/01/roblox-return-to-service-10-28-10-31-2021","failure_patterns":"SEA-FM-011;SEA-FM-006","capabilities":"fail.cost_resource_exhaustion;fail.recovery_failure;fail.missing_observability;fail.cascading_dep_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Roll out new infrastructure features gradually under realistic load: Enable new capabilities on a small portion of traffic and watch contention metrics before full rollout. | Separate critical workloads and their monitoring: Avoid one shared cluster for many workloads, and keep observability independent of the system being diagnosed.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-023"}
{"incident_id":"SEA-POST-024","evidence_tier":"documented_incident","title":"Dormant configuration error in legacy routing systems withdraws Cloudflare's 1.1.1.1 DNS resolver worldwide (2025)","summary":"A configuration change on June 6, 2025 for a not-yet-used service accidentally included the 1.1.1.1 resolver's IP prefixes in that service's topology; the error sat dormant in production.","organization":"Cloudflare","incident_date":"2025-07-14","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Cloudflare 1.1.1.1 incident on July 14, 2025","source_publisher":"Cloudflare","source_url":"https://blog.cloudflare.com/cloudflare-1-1-1-1-incident-on-july-14-2025/","failure_patterns":"SEA-FM-011;SEA-FM-008","capabilities":"auth.infrastructure_modification;fail.stale_state;fail.cascading_dep_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Validate configuration against what it will change, not only what it adds: Before deploying routing or topology changes, diff the complete resulting state and flag any change to production services outside the change's intended scope. | Roll out configuration in stages with health checks: Propagate address and routing changes to a small set of locations first and stop automatically when traffic or health signals drop.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-024"}
{"incident_id":"SEA-POST-025","evidence_tier":"documented_incident","title":"Third-party storage outage behind Workers KV takes down many Cloudflare services (2025)","summary":"Workers KV relied on a central data store, partly backed by a third-party cloud provider; when that provider had an outage, cold reads and writes to KV failed.","organization":"Cloudflare","incident_date":"2025-06-12","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Cloudflare service outage June 12, 2025","source_publisher":"Cloudflare","source_url":"https://blog.cloudflare.com/cloudflare-service-outage-june-12-2025/","failure_patterns":"SEA-FM-006","capabilities":"arch.external_api;fail.cascading_dep_failure;fail.recovery_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Remove single dependencies on infrastructure you do not own: Replicate critical configuration and authentication data across independent providers, and test operating with one of them unavailable. | Let dependent products degrade instead of fail: Cache last-known-good configuration locally so services keep working when the shared store is unreachable.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-025"}
{"incident_id":"SEA-POST-026","evidence_tier":"documented_incident","title":"Unplanned automatic OS update cuts networking for Heroku apps and its own status tools (2025)","summary":"An automated operating-system update ran on production hosts when it should have been disabled, and restarted their networking service.","organization":"Heroku (Salesforce)","incident_date":"2025-06-10","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Summary of Heroku June 10 Outage","source_publisher":"Heroku","source_url":"https://www.heroku.com/blog/summary-of-june-10-outage/","failure_patterns":"SEA-FM-011;SEA-FM-008","capabilities":"auth.infrastructure_modification;fail.recovery_failure;fail.missing_observability;fail.cascading_dep_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Allow changes to production only through the controlled deployment path: Disable or block automatic package and OS upgrades on production hosts, so every change is staged and observable. | Keep incident tooling and status pages off the infrastructure they report on: Run status pages and recovery tools on independent infrastructure so an outage cannot also silence the response.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-POST-026"}
{"incident_id":"SEA-PUB-040","evidence_tier":"illustrative_scenario","title":"Autonomous AI Agent Model Context Protocol Token Hijacking","summary":"Model Context Protocol search tool allowed prompt injection to leak bearer tokens in subagent prompt context.","organization":"AI Agentic Development Platform Infrastructure","incident_date":"2021-05-13","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-010;SEA-FM-001","capabilities":"arch.tool_enabled_agent;data.credentials_secrets;data.untrusted_external_text","is_ai_system":true,"is_agentic":true,"safeguards":"Automated Defensive Guardrail: Constrain tool invocation parameters using strict typed schemas with validated enum sets and dry-run preview before committing state.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-040"}
{"incident_id":"SEA-PUB-041","evidence_tier":"illustrative_scenario","title":"AI LLM Coding Assistant Arbitrary Terminal Command Execution","summary":"AI coding agent accepted unvalidated repository prompt that executed malicious curl script inside local terminal.","organization":"AI Developer Tools Inc. Infrastructure","incident_date":"2022-06-14","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-010;SEA-FM-003","capabilities":"auth.code_execution;arch.tool_enabled_agent;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Constrain tool invocation parameters using strict typed schemas with validated enum sets and dry-run preview before committing state.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-041"}
{"incident_id":"SEA-PUB-042","evidence_tier":"illustrative_scenario","title":"Distributed Consensus Split-Brain State Divergence","summary":"Asymmetric network partition caused two leader nodes to accept client writes simultaneously, corrupting ledger state.","organization":"Distributed Database Corporation Infrastructure","incident_date":"2023-07-15","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-007;SEA-FM-004","capabilities":"auth.infrastructure_modification;arch.caching;data.financial_records","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Implement transactional outbox patterns or saga orchestrators with monotonic event versioning to guarantee distributed state convergence.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-042"}
{"incident_id":"SEA-PUB-043","evidence_tier":"illustrative_scenario","title":"Serverless Function Cold Start Connection Pool Exhaustion","summary":"Spike in concurrent lambda invocations opened 10,000 direct PostgreSQL connections, crashing primary RDS instance.","organization":"Serverless Cloud Provider Infrastructure","incident_date":"2024-08-16","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-006;SEA-FM-007","capabilities":"auth.infrastructure_modification;arch.multi_tenant;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-043"}
{"incident_id":"SEA-PUB-044","evidence_tier":"illustrative_scenario","title":"Payment Webhook Out-of-Order Delivery State Machine Corruption","summary":"Late-arriving paymentfailed webhook processed after subscriptionrenewed, deactivating active paying customer account.","organization":"FinTech Billing Platform Infrastructure","incident_date":"2025-09-17","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-007;SEA-FM-008","capabilities":"auth.financial_action;arch.external_api;data.financial_records","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Implement transactional outbox patterns or saga orchestrators with monotonic event versioning to guarantee distributed state convergence.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-044"}
{"incident_id":"SEA-PUB-045","evidence_tier":"illustrative_scenario","title":"GraphQL Deeply Nested Query Denial of Service","summary":"Recursive query execution (user { friends { friends { friends } } }) caused heap memory exhaustion on backend node.","organization":"Enterprise API Gateway Infrastructure","incident_date":"2021-10-18","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-006;SEA-FM-003","capabilities":"arch.multi_tenant;arch.external_api;data.untrusted_external_text","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-045"}
{"incident_id":"SEA-PUB-046","evidence_tier":"illustrative_scenario","title":"JWT Secret Key Confusion & Privilege Escalation","summary":"Backend accepted HMAC-SHA256 tokens signed with public RSA key, allowing attacker to forge administrator tokens.","organization":"Cloud SaaS Authentication Service Infrastructure","incident_date":"2022-11-19","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-001;SEA-FM-008","capabilities":"data.credentials_secrets;auth.privileged_action;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-046"}
{"incident_id":"SEA-PUB-047","evidence_tier":"illustrative_scenario","title":"Distributed Rate Limiter Redis Key Collision & Global Lockout","summary":"Missing tenant namespace prefix in rate limiter Redis key caused single user limit to apply globally to all tenants.","organization":"Global API Proxy Network Infrastructure","incident_date":"2023-12-20","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-001;SEA-FM-006","capabilities":"arch.multi_tenant;arch.caching;auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-047"}
{"incident_id":"SEA-PUB-048","evidence_tier":"illustrative_scenario","title":"Kafka Consumer Group Rebalance Storm Message Lag","summary":"Slow consumer heartbeat during heavy batch processing triggered infinite rebalance loop, halting all event consumption.","organization":"Streaming Analytics Platform Infrastructure","incident_date":"2024-01-21","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-006;SEA-FM-007","capabilities":"auth.infrastructure_modification;arch.caching;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-048"}
{"incident_id":"SEA-PUB-049","evidence_tier":"illustrative_scenario","title":"Kubernetes Ingress Controller Memory Leak on Dynamic SSL Reload","summary":"Frequent Let's Encrypt cert renewals triggered daily NGINX reloads, fragmenting heap until pods OOM-killed.","organization":"Cloud Orchestration Mesh Infrastructure","incident_date":"2025-02-22","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-006;SEA-FM-005","capabilities":"auth.infrastructure_modification;data.credentials_secrets;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-049"}
{"incident_id":"SEA-PUB-050","evidence_tier":"illustrative_scenario","title":"Container Image Registry Tag Mutation Supply Chain Compromise","summary":"Mutable :latest container tag overwritten by compromised build runner; deployed vulnerable image to production.","organization":"Cloud Native Platform Infrastructure","incident_date":"2021-03-23","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-003;SEA-FM-009","capabilities":"auth.code_execution;auth.infrastructure_modification;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Enforce mandatory tenant namespacing (org_{id}:resource_{id}) across all shared cache and database queries, verifying tenant claims exclusively against verified session tokens.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-050"}
{"incident_id":"SEA-PUB-051","evidence_tier":"illustrative_scenario","title":"DNSSEC Key Rollback & Global Domain Invalidation","summary":"Mismatched DS records during planned Key Signing Key (KSK) rollover caused recursive resolvers worldwide to return SERVFAIL.","organization":"Top-Level Domain Registry Infrastructure","incident_date":"2022-04-24","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-008;SEA-FM-005","capabilities":"auth.infrastructure_modification;data.credentials_secrets;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Verify optimistic concurrency version numbers and real-time entitlement tokens immediately prior to committing background mutations.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-051"}
{"incident_id":"SEA-PUB-052","evidence_tier":"illustrative_scenario","title":"OAuth Refresh Token Reuse Race Condition & Account Takeover","summary":"Simultaneous token refresh requests from multi-tab sessions triggered false reuse detection, locking user accounts.","organization":"Consumer Mobile Platform Infrastructure","incident_date":"2023-05-25","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-007;SEA-FM-001","capabilities":"data.credentials_secrets;arch.multi_tenant;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Implement transactional outbox patterns or saga orchestrators with monotonic event versioning to guarantee distributed state convergence.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-052"}
{"incident_id":"SEA-PUB-053","evidence_tier":"illustrative_scenario","title":"BGP Prefix Hijack Inadvertent Cryptocurrency Wallet Redirection","summary":"Rogue BGP route announcement redirected DNS queries for major cryptocurrency portal to malicious server for 2 hours.","organization":"Internet Routing Infrastructure Infrastructure","incident_date":"2024-06-26","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-001;SEA-FM-005","capabilities":"auth.infrastructure_modification;arch.external_api;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-053"}
{"incident_id":"SEA-PUB-054","evidence_tier":"illustrative_scenario","title":"Database Auto-Vacuum Starvation Transaction ID Wraparound","summary":"Aggressive long-running analytics queries blocked auto-vacuum; reached 2-billion transaction ID limit forcing emergency shutdown.","organization":"Enterprise Managed PostgreSQL Infrastructure","incident_date":"2025-07-27","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-005;SEA-FM-006","capabilities":"data.financial_records;auth.infrastructure_modification;arch.caching","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Implement mandatory soft-delete retention grace periods, air-gapped immutable backup snapshots, and multi-factor approval for bulk infrastructure teardown.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-054"}
{"incident_id":"SEA-PUB-055","evidence_tier":"illustrative_scenario","title":"WebSocket Connection Thundering Herd on Load Balancer Restart","summary":"Simultaneous disconnect of 500,000 active WebSocket clients during proxy restart saturated auth services upon reconnection.","organization":"Real-Time Collaboration Platform Infrastructure","incident_date":"2021-08-28","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-006;SEA-FM-007","capabilities":"arch.multi_tenant;arch.caching;auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Configure exponential backoff with full randomized jitter on all external dependencies, backed by circuit breakers and iteration budget caps.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-055"}
{"incident_id":"SEA-PUB-056","evidence_tier":"illustrative_scenario","title":"LLM Tool Call Hallucination SQL Injection Parameter","summary":"LLM hallucinated unescaped string concatenation when generating dynamic SQL query from user input, allowing data extraction.","organization":"Autonomous AI Database Agent Infrastructure","incident_date":"2022-09-01","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-010;SEA-FM-001","capabilities":"auth.code_execution;arch.tool_enabled_agent;data.untrusted_external_text","is_ai_system":true,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Constrain tool invocation parameters using strict typed schemas with validated enum sets and dry-run preview before committing state.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-056"}
{"incident_id":"SEA-PUB-057","evidence_tier":"illustrative_scenario","title":"Cloud IAM Wildcard Permission Lateral Privilege Escalation","summary":"Overly permissive iam:PassRole on worker instances allowed compromised application to assume administrator role.","organization":"Enterprise Cloud Infrastructure Infrastructure","incident_date":"2023-10-02","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-001;SEA-FM-009","capabilities":"auth.privileged_action;data.credentials_secrets;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-057"}
{"incident_id":"SEA-PUB-058","evidence_tier":"illustrative_scenario","title":"S3 Bucket Access Control List (ACL) Misconfiguration Data Leak","summary":"Default bucket ACL configured as public-read exposed 500,000 passport photos and bank statements to search crawlers.","organization":"Financial Technology Startup Infrastructure","incident_date":"2024-11-03","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-001;SEA-FM-009","capabilities":"data.pii;data.financial_records;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Attach unique, client-generated idempotency keys (Idempotency-Key header) to all state-mutating requests and reconcile transaction status before retrying.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-058"}
{"incident_id":"SEA-PUB-059","evidence_tier":"illustrative_scenario","title":"Cross-Tenant Redis Session Hijacking via Unprefixed Cache Keys","summary":"Session store used un-namespaced integer user IDs; tenant A authenticated as user 101 retrieved session of tenant B user 101.","organization":"SaaS CRM Platform Infrastructure","incident_date":"2025-12-04","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-003;SEA-FM-008","capabilities":"arch.multi_tenant;arch.caching;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Enforce mandatory tenant namespacing (org_{id}:resource_{id}) across all shared cache and database queries, verifying tenant claims exclusively against verified session tokens.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-PUB-059"}
{"incident_id":"SEA-REG-001","evidence_tier":"documented_incident","title":"Confusing loan-system interface leads Citibank to wire nearly $900 million in principal to Revlon lenders (2020)","summary":"Unintuitive Flexcube interface required checking obscure override box; bank accidentally wired $894M of proprietary funds to Revlon lenders.","organization":"Citibank","incident_date":"2020-08-11","date_basis":"incident","source_type":"court_filing","source_title":"In re Citibank August 11, 2020 Wire Transfers, 20-cv-6539 (JMF): findings of fact and conclusions of law","source_publisher":"U.S. District Court, Southern District of New York","source_url":"https://www.nysd.uscourts.gov/sites/default/files/2021-02/20cv6539%20Citibank%20Opinion.pdf","failure_patterns":"SEA-FM-002;SEA-FM-007","capabilities":"auth.financial_action;auth.privileged_action;data.financial_records","is_ai_system":false,"is_agentic":false,"safeguards":"Design payment interfaces so a risky option is explicit: Make the control that changes a payment from interest-only to full principal unmistakable and require a clear confirmation. | Require dual control and reconciliation for large payments: Independent approval and automated checks against expected amounts should catch payments that differ by orders of magnitude.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-REG-001"}
{"incident_id":"SEA-REG-002","evidence_tier":"documented_incident","title":"Capital One cloud breach and an $80 million OCC penalty for weak cloud-migration risk assessment (2019)","summary":"The OCC assessed an $80 million civil money penalty against Capital One for failing to establish effective risk assessment processes before migrating significant IT operations to the public cloud and for not correcting…","organization":"Capital One","incident_date":"2019-07-19","date_basis":"incident","source_type":"regulator_report","source_title":"OCC Assesses $80 Million Civil Money Penalty Against Capital One","source_publisher":"Office of the Comptroller of the Currency","source_url":"https://www.occ.gov/news-issuances/news-releases/2020/nr-occ-2020-101.html","failure_patterns":"SEA-FM-013;SEA-FM-002","capabilities":"data.credentials_secrets;data.pii;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Assess cloud risk before migrating, and fix findings on time: Complete risk assessment and network-security control design before moving workloads, then track remediation of deficiencies. | Restrict cloud metadata and role permissions: Require metadata-service protections, least-privilege roles for edge components, and alerting on unusual bulk reads of storage.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-REG-002"}
{"incident_id":"SEA-REG-003","evidence_tier":"documented_incident","title":"Retail broker failed best-execution reviews while taking high payment for order flow (Robinhood, SEC 2020)","summary":"From July 2016 to June 2019 the broker received high payment for order flow but did not conduct adequate, regular and rigorous reviews of execution quality on customer orders.","organization":"Robinhood Financial","incident_date":"2020-12-17","date_basis":"disclosure","source_type":"regulator_report","source_title":"SEC Order: Robinhood Financial LLC (Release 33-10906)","source_publisher":"U.S. Securities and Exchange Commission","source_url":"https://www.sec.gov/litigation/admin/2020/33-10906.pdf","failure_patterns":"SEA-FM-002","capabilities":"auth.financial_action;auth.autonomous_approval;data.financial_records","is_ai_system":true,"is_agentic":true,"safeguards":"Review execution quality regularly and rigorously: Compare execution against alternatives with documented, periodic reviews and act on findings. | Disclose revenue sources accurately: Describe payment-for-order-flow and other conflicts in customer-facing materials.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-REG-003"}
{"incident_id":"SEA-REG-004","evidence_tier":"documented_incident","title":"Layering algorithm places and cancels large E-mini S&P 500 orders around the 2010 Flash Crash","summary":"The CFTC alleged a layering algorithm automatically placed four to six very large sell orders in the E-mini S&P 500 order book and cancelled them without execution.","organization":"Nav Sarao Futures Limited","incident_date":"2010-05-06","date_basis":"incident","source_type":"regulator_report","source_title":"CFTC Charges Navinder Singh Sarao and Nav Sarao Futures Limited PLC with Price Manipulation and Spoofing","source_publisher":"U.S. Commodity Futures Trading Commission","source_url":"https://www.cftc.gov/PressRoom/PressReleases/7156-15","failure_patterns":"SEA-FM-002;SEA-FM-009","capabilities":"auth.financial_action;auth.autonomous_approval;auth.code_execution","is_ai_system":true,"is_agentic":true,"safeguards":"Limit order modification and cancellation behaviour: Enforce order-to-trade and cancel-rate limits in the risk layer, independent of trading logic. | Surveil for layering patterns: Monitor order-book activity for repeated large orders placed and cancelled without execution.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-REG-004"}
{"incident_id":"SEA-REG-005","evidence_tier":"illustrative_scenario","title":"Quantitative Market Maker Microwave Timestamp Synchronization Failure","summary":"A microsecond clock drift between Chicago and New York microwave feeds caused automated trading models to execute arbitrage against stale quotes.","organization":"Proprietary Quantitative Arbitrage Trading Mesh","incident_date":"2024-03-15","date_basis":"","source_type":"vendor_postmortem","source_title":"Illustrative scenario (no primary source)","source_publisher":"CollectSEA illustrative scenario","source_url":"https://collectsea.com/methodology","failure_patterns":"SEA-FM-002;SEA-FM-006","capabilities":"auth.financial_action;auth.autonomous_approval;data.financial_records","is_ai_system":false,"is_agentic":false,"safeguards":"Automated Defensive Guardrail: Enforce business authorization limits and approval thresholds in deterministic backend interceptors, requiring dual-control human sign-off for high-impact actions.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-REG-005"}
{"incident_id":"SEA-SEC-001","evidence_tier":"documented_incident","title":"Password spray on a legacy test tenant exposes Microsoft corporate email to a nation-state actor (2024)","summary":"Legacy test tenant without MFA compromised via password spraying; adversary created malicious OAuth apps with mail.read privileges.","organization":"Microsoft","incident_date":"2024-01-19","date_basis":"disclosure","source_type":"regulator_report","source_title":"Microsoft Form 8-K: nation-state attack on corporate email (Jan 2024)","source_publisher":"U.S. SEC EDGAR (Microsoft Corporation)","source_url":"https://www.sec.gov/Archives/edgar/data/789019/000119312524011295/d708866d8k.htm","failure_patterns":"SEA-FM-012;SEA-FM-002","capabilities":"auth.privileged_action;data.credentials_secrets;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce MFA everywhere, including legacy and test tenants: Require MFA and conditional access on every account and tenant; retire or lock down legacy and non-production tenants that can reach production data. | Constrain and monitor OAuth applications: Limit which applications can hold broad mailbox permissions, expire stale consents, and alert when an application requests mail-read or elevated roles.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-001"}
{"incident_id":"SEA-SEC-002","evidence_tier":"documented_incident","title":"Stolen credentials on a remote-access portal lead to the Change Healthcare ransomware outage (2024)","summary":"Single-factor remote access portal breached with stolen credentials; ransomware forced nationwide claims gateway disconnection.","organization":"Change Healthcare (UnitedHealth Group)","incident_date":"2024-02-21","date_basis":"disclosure","source_type":"regulator_report","source_title":"UnitedHealth Group Form 8-K: Change Healthcare cyber security incident (Feb 2024)","source_publisher":"U.S. SEC EDGAR (UnitedHealth Group)","source_url":"https://www.sec.gov/Archives/edgar/data/731766/000073176624000045/unh-20240221.htm","failure_patterns":"SEA-FM-012;SEA-FM-005","capabilities":"auth.financial_action;data.financial_records;auth.privileged_action","is_ai_system":false,"is_agentic":false,"safeguards":"Require MFA on all remote-access portals: No externally reachable access path to production systems should accept a single factor. | Isolate and recover independently: Segment clearinghouse components and keep tested, separately restorable backups and failover so one compromised gateway cannot halt claims nationwide.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-002"}
{"incident_id":"SEA-SEC-003","evidence_tier":"documented_incident","title":"Faulty Channel File 291 content update crashes Windows hosts running CrowdStrike Falcon (2024)","summary":"Rapid deployment channel 291 bypassed staged canary rings; out-of-bounds memory read triggered BSOD on 8.5M Windows hosts.","organization":"CrowdStrike","incident_date":"2024-07-19","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Channel File 291 Incident Root Cause Analysis","source_publisher":"CrowdStrike","source_url":"https://www.crowdstrike.com/wp-content/uploads/2024/08/Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf","failure_patterns":"SEA-FM-011","capabilities":"auth.code_execution;auth.infrastructure_modification;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Stage every content update through canary rings: Release configuration and content updates to a small ring first, observe crash and health signals, then widen; never push globally in one step. | Validate content and fail safe: Check parameter counts and bounds between template definitions and the interpreter before release, and make the agent skip malformed content rather than crash the host.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-003"}
{"incident_id":"SEA-SEC-004","evidence_tier":"documented_incident","title":"Help-desk social engineering leads to ransomware and a systems shutdown at MGM Resorts (2023)","summary":"Social engineering of IT helpdesk reset admin credentials; ransomware deployed directly to ESXi hypervisors shutting down resort operations.","organization":"MGM Resorts","incident_date":"2023-09-13","date_basis":"disclosure","source_type":"regulator_report","source_title":"MGM Resorts Form 8-K: cybersecurity issue (Sept 2023)","source_publisher":"U.S. SEC EDGAR (MGM Resorts International)","source_url":"https://www.sec.gov/Archives/edgar/data/789570/000119312523233855/d502352d8k.htm","failure_patterns":"SEA-FM-012;SEA-FM-014","capabilities":"auth.destructive_action;auth.privileged_action;auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Verify identity out of band for credential resets: Helpdesk must verify the caller through a channel the caller does not control before resetting credentials or MFA for privileged accounts. | Protect the hypervisor management plane: Put virtualization management behind dedicated MFA-protected admin identities and separate it from general corporate credentials.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-004"}
{"incident_id":"SEA-SEC-005","evidence_tier":"documented_incident","title":"Cyberattack takes Clorox IT systems offline and forces manual order processing (2023)","summary":"Ransomware encrypted internal ordering databases; lack of decoupled offline queue forced multi-week manual processing and inventory write-downs.","organization":"Clorox","incident_date":"2023-08-14","date_basis":"disclosure","source_type":"regulator_report","source_title":"Clorox Form 8-K: unauthorized activity on IT systems (Aug 2023)","source_publisher":"U.S. SEC EDGAR (The Clorox Company)","source_url":"https://www.sec.gov/Archives/edgar/data/21076/000120677423000969/clx4231381-8k.htm","failure_patterns":"SEA-FM-014;SEA-FM-005","capabilities":"auth.financial_action;data.financial_records;auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Keep a tested manual or offline fallback for ordering: Define and rehearse a degraded-mode path so orders keep flowing when the ERP is unavailable. | Immutable, restorable backups: Keep offline or immutable backups of ordering databases and run restore drills against recovery-time targets.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-005"}
{"incident_id":"SEA-SEC-006","evidence_tier":"documented_incident","title":"Stolen credential opens Okta's support system, where uploaded HAR files held customer session tokens (2023)","summary":"Support portal allowed unredacted HAR file uploads containing session tokens; threat actor hijacked customer administrator accounts.","organization":"Okta","incident_date":"2023-10-19","date_basis":"disclosure","source_type":"vendor_postmortem","source_title":"Tracking Unauthorized Access to Okta's Support System","source_publisher":"Okta Security","source_url":"https://sec.okta.com/articles/2023/10/tracking-unauthorized-access-oktas-support-system","failure_patterns":"SEA-FM-012;SEA-FM-009","capabilities":"data.credentials_secrets;data.pii;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Redact secrets from customer-uploaded diagnostics: Strip or reject session tokens and cookies in uploaded HAR and log files before they are stored or viewed by support staff. | Harden support tooling identities: Keep service-account credentials out of personal browsers, scope them minimally, and bind or shorten customer session lifetimes so stolen tokens lose value quickly.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-006"}
{"incident_id":"SEA-SEC-007","evidence_tier":"documented_incident","title":"Repurposed flag and an incomplete deployment send runaway orders from Knight Capital's router (2012)","summary":"Repurposed test flag on 1 of 8 servers activated legacy Power Peg loop; bought 4M shares in 45 minutes losing $460M.","organization":"Knight Capital","incident_date":"2012-08-01","date_basis":"incident","source_type":"regulator_report","source_title":"SEC Order Instituting Proceedings: Knight Capital Americas LLC (Release 34-70694)","source_publisher":"U.S. Securities and Exchange Commission","source_url":"https://www.sec.gov/litigation/admin/2013/34-70694.pdf","failure_patterns":"SEA-FM-002;SEA-FM-011","capabilities":"auth.financial_action;auth.autonomous_approval;auth.code_execution","is_ai_system":true,"is_agentic":true,"safeguards":"Enforce hard pre-trade limits in deterministic code: Cap order volume, position and notional exposure in a control layer the trading logic cannot bypass, with an automatic kill switch. | Deploy atomically and verify every server: Remove dead code paths, reuse of old flags and partial rollouts; verify that all servers run identical code before enabling features.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-007"}
{"incident_id":"SEA-SEC-008","evidence_tier":"documented_incident","title":"Call and text records of nearly all AT&T wireless customers taken from a third-party cloud workspace (2024)","summary":"Contractor credentials without MFA accessed third-party cloud data warehouse; downloaded 109 million customer call and text records.","organization":"AT&T","incident_date":"2024-05-06","date_basis":"disclosure","source_type":"regulator_report","source_title":"AT&T Form 8-K, Item 1.05: material cybersecurity incident (May 2024)","source_publisher":"U.S. SEC EDGAR (AT&T Inc.)","source_url":"https://www.sec.gov/Archives/edgar/data/732717/000073271724000046/t-20240506.htm","failure_patterns":"SEA-FM-012;SEA-FM-009","capabilities":"data.pii;data.credentials_secrets;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Require MFA for contractor and third-party access: Third-party accounts reaching data warehouses must use MFA and network allow-lists. | Detect bulk export: Alert on and rate-limit large exports from analytics warehouses, and review who can read historical data.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-008"}
{"incident_id":"SEA-SEC-009","evidence_tier":"documented_incident","title":"Missing access checks in a document portal expose over 800 million First American images (2019)","summary":"Sequential integer URLs in imaging web portal lacked object-level authorization checks; exposed 885 million escrow and wire documents.","organization":"First American Financial","incident_date":"2019-05-24","date_basis":"incident","source_type":"regulator_report","source_title":"SEC Charges First American Financial for Cybersecurity Disclosure Controls Failures","source_publisher":"U.S. Securities and Exchange Commission","source_url":"https://www.sec.gov/news/press-release/2021-102","failure_patterns":"SEA-FM-003;SEA-FM-013","capabilities":"data.financial_records;data.pii;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Enforce object-level authorization: Check that the requester may access each document on every request and use unguessable identifiers instead of sequential ones. | Escalate security findings to disclosure decision-makers: Route assessment results on known vulnerabilities to the people responsible for incident and disclosure decisions.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-009"}
{"incident_id":"SEA-SEC-010","evidence_tier":"documented_incident","title":"SUNBURST: a backdoor inserted into SolarWinds Orion builds reaches customers (2020)","summary":"Compromised build server injected SUNBURST malware into compiler memory during build process; distributed to 18,000 customers.","organization":"SolarWinds","incident_date":"2020-12-14","date_basis":"disclosure","source_type":"regulator_report","source_title":"SEC v. SolarWinds Corporation and Timothy G. Brown: complaint","source_publisher":"U.S. Securities and Exchange Commission","source_url":"https://www.sec.gov/litigation/complaints/2023/comp-pr2023-227.pdf","failure_patterns":"SEA-FM-002;SEA-FM-009","capabilities":"auth.code_execution;auth.infrastructure_modification;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Harden and isolate the build pipeline: Treat build servers as production-critical: restrict access, use ephemeral builders and log all changes to build inputs. | Verify build output independently: Use reproducible builds and independent comparison of artifacts before signing and distribution.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-010"}
{"incident_id":"SEA-SEC-011","evidence_tier":"documented_incident","title":"Zillow winds down its algorithmic home-buying business after price forecasts miss (2021)","summary":"Machine learning pricing models drifted during market volatility; automated purchasing bought homes above value resulting in $540M inventory write-down.","organization":"Zillow","incident_date":"2021-11-02","date_basis":"disclosure","source_type":"regulator_report","source_title":"Zillow Group Form 8-K: wind-down of Zillow Offers (Nov 2021)","source_publisher":"U.S. SEC EDGAR (Zillow Group, Inc.)","source_url":"https://www.sec.gov/Archives/edgar/data/1617640/000161764021000085/z-20211102.htm","failure_patterns":"SEA-FM-002;SEA-FM-010","capabilities":"auth.financial_action;auth.autonomous_approval;arch.tool_enabled_agent","is_ai_system":true,"is_agentic":true,"safeguards":"Cap automated exposure in deterministic limits: Set hard caps on automated purchasing volume and concentration, with human approval above thresholds. | Monitor model drift and pause automatically: Compare model valuations with realised outcomes and halt automated action when error exceeds a tolerance.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-011"}
{"incident_id":"SEA-SEC-012","evidence_tier":"documented_incident","title":"Cyberattack disrupts Johnson Controls' internal IT infrastructure (2023)","summary":"Ransomware encrypted virtual hypervisors; halted manufacturing and billing operations incurring $27M in direct remediation costs.","organization":"Johnson Controls","incident_date":"2023-09-27","date_basis":"disclosure","source_type":"regulator_report","source_title":"Johnson Controls Form 8-K: cybersecurity incident (Sept 2023)","source_publisher":"U.S. SEC EDGAR (Johnson Controls International plc)","source_url":"https://www.sec.gov/Archives/edgar/data/833444/000083344423000036/jci-20230927.htm","failure_patterns":"SEA-FM-014;SEA-FM-005","capabilities":"auth.destructive_action;auth.infrastructure_modification;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Segment and protect hypervisor infrastructure: Isolate virtualization management and enforce MFA and least privilege on administrators. | Immutable backups with tested restores: Keep offline copies of virtual machines and rehearse restoring critical workloads.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-012"}
{"incident_id":"SEA-SEC-013","evidence_tier":"documented_incident","title":"Unpatched web-application vulnerability (Apache Struts) leads to the Equifax breach (2017)","summary":"Apache Struts CVE-2017-5638 parser bug left unpatched for 2 months; attackers executed arbitrary commands and accessed unencrypted databases of 147M Americans.","organization":"Equifax","incident_date":"2017-09-07","date_basis":"disclosure","source_type":"regulator_report","source_title":"Equifax Form 8-K, Exhibit 99.1: cybersecurity incident announcement (Sept 2017)","source_publisher":"U.S. SEC EDGAR (Equifax Inc.)","source_url":"https://www.sec.gov/Archives/edgar/data/0000033185/000003318517000026/exhibit99120170907.htm","failure_patterns":"SEA-FM-013;SEA-FM-009","capabilities":"data.pii;auth.code_execution;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Patch critical vulnerabilities on a defined deadline: Maintain an asset inventory, scan for affected components and enforce a short remediation deadline for actively exploited issues. | Keep inspection and monitoring effective: Monitor certificates and traffic inspection so exfiltration of sensitive data is detectable, and encrypt sensitive stores.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-013"}
{"incident_id":"SEA-SEC-014","evidence_tier":"documented_incident","title":"Ransomware shuts down CDK Global's dealer-management platform for about 15,000 dealerships (2024)","summary":"Ransomware forced shutdown of core dealer management SaaS platform, halting sales, financing, and parts ordering for 15,000 auto dealerships.","organization":"CDK Global","incident_date":"2024-06-19","date_basis":"incident","source_type":"verified_journalism","source_title":"CDK Global outage caused by BlackSuit ransomware attack","source_publisher":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/cdk-global-outage-caused-by-blacksuit-ransomware-attack/","failure_patterns":"SEA-FM-014;SEA-FM-005","capabilities":"auth.financial_action;arch.multi_tenant;auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Contain before restoring: Finish eradication and monitoring before reconnecting systems; restoring too early exposed CDK to a second incident. | Offer a documented degraded mode to customers: Give dependent customers a manual fallback and clear status updates during multi-day outages.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-014"}
{"incident_id":"SEA-SEC-015","evidence_tier":"documented_incident","title":"Access to the Starwood reservation network since 2014 exposes Marriott guest records (2018)","summary":"Legacy Starwood database left unsegmented following acquisition; attackers extracted passport numbers and encrypted payment cards of 383M guests.","organization":"Marriott International","incident_date":"2018-11-30","date_basis":"disclosure","source_type":"regulator_report","source_title":"Marriott Form 8-K, Exhibit 99: Starwood guest reservation database security incident (Nov 2018)","source_publisher":"U.S. SEC EDGAR (Marriott International)","source_url":"https://www.sec.gov/Archives/edgar/data/0001048286/000162828018014745/a2018ex99.htm","failure_patterns":"SEA-FM-014;SEA-FM-013","capabilities":"data.pii;data.financial_records;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Secure acquired systems during integration: Assess, segment and monitor acquired networks before connecting them and before years pass undetected. | Minimise and encrypt sensitive guest data: Tokenise or encrypt passport and payment fields and restrict who can query reservation data in bulk.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-015"}
{"incident_id":"SEA-SEC-016","evidence_tier":"documented_incident","title":"SMS phishing of employees leads to compromise of Twilio customer accounts (2022)","summary":"Attackers used SMS phishing to fool some Twilio employees into giving up credentials, then used them to access internal systems and information about a limited number of customer accounts.","organization":"Twilio","incident_date":"2022-08-04","date_basis":"incident","source_type":"vendor_postmortem","source_title":"Incident Report: Employee and Customer Account Compromise","source_publisher":"Twilio","source_url":"https://www.twilio.com/en-us/blog/archive/2022/august-2022-social-engineering-attack","failure_patterns":"SEA-FM-012;SEA-FM-009","capabilities":"auth.external_communication;data.credentials_secrets;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Use phishing-resistant MFA for employees: Hardware-key or passkey authentication resists lookalike-domain phishing that defeats SMS and one-time codes. | Limit and log internal console access: Restrict what an employee account can do in customer-account tooling and alert on unusual access.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-016"}
{"incident_id":"SEA-SEC-017","evidence_tier":"documented_incident","title":"Phishing impersonating a CI vendor yields GitHub credentials and 130 source-code repositories (Dropbox, 2022)","summary":"Phishing emails impersonating CircleCI led an employee to a fake page where GitHub credentials and a one-time code were captured, giving the attacker access to a GitHub organization and 130 code repositories.","organization":"Dropbox","incident_date":"2022-11-03","date_basis":"disclosure","source_type":"regulator_report","source_title":"Dropbox Form 8-K: unauthorized access to GitHub repositories (Nov 2022)","source_publisher":"U.S. SEC EDGAR (Dropbox, Inc.)","source_url":"https://www.sec.gov/Archives/edgar/data/1467623/000146762322000046/dbx-20221103.htm","failure_patterns":"SEA-FM-012;SEA-FM-009","capabilities":"auth.code_execution;data.credentials_secrets;arch.external_api","is_ai_system":false,"is_agentic":false,"safeguards":"Require phishing-resistant authentication for code hosting: Use origin-bound credentials (passkeys or hardware keys) so a lookalike page cannot replay a one-time code. | Keep secrets out of repositories: Scan repositories for API keys and rotate any credential found; store secrets in a vault.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-017"}
{"incident_id":"SEA-SEC-018","evidence_tier":"documented_incident","title":"Major entertainment company hit by an SMB worm with destructive wiper components (2014)","summary":"US-CERT alert TA14-353A describes an SMB worm tool used against a major entertainment company that spreads by brute-forcing Windows SMB shares.","organization":"Entertainment company (unnamed in the CISA alert)","incident_date":"2014-12-19","date_basis":"disclosure","source_type":"vendor_postmortem","source_title":"Alert TA14-353A: Targeted Destructive Malware","source_publisher":"U.S. CISA / US-CERT","source_url":"https://www.cisa.gov/news-events/alerts/2014/12/19/targeted-destructive-malware","failure_patterns":"SEA-FM-014;SEA-FM-005","capabilities":"auth.destructive_action;auth.privileged_action;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Segment and restrict credential spread: Limit lateral movement over file-sharing protocols and protect privileged credentials. | Offline backups and mass-deletion detection: Keep offline backups of critical servers and alert on large-scale overwrites or boot-record changes.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-018"}
{"incident_id":"SEA-SEC-019","evidence_tier":"documented_incident","title":"Payment card data for about 40 million accounts taken from Target's U.S. stores (2013)","summary":"HVAC vendor portal credentials lacked two-factor authentication; attackers pivoted into internal networks and pushed BlackPOS memory scrapers to 1,800 checkout terminals.","organization":"Target","incident_date":"2013-12-19","date_basis":"disclosure","source_type":"vendor_postmortem","source_title":"Target Confirms Unauthorized Access to Payment Card Data in U.S. Stores","source_publisher":"Target Corporation","source_url":"https://corporate.target.com/article/2013/12/target-confirms-unauthorized-access-to-payment-car","failure_patterns":"SEA-FM-012;SEA-FM-014","capabilities":"auth.financial_action;data.financial_records;data.credentials_secrets","is_ai_system":false,"is_agentic":false,"safeguards":"Constrain third-party vendor access: Require MFA for vendor portals, scope access to only what the vendor needs and segment vendor networks from payment systems. | Monitor point-of-sale software integrity: Detect unexpected binaries on terminals and unusual outbound data flows.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-019"}
{"incident_id":"SEA-SEC-020","evidence_tier":"documented_incident","title":"Phone spear-phishing gives attackers Twitter's internal support tools; 130 accounts targeted (2020)","summary":"A phone spear-phishing attack on a small number of employees gave attackers credentials to internal support tools on July 15, 2020.","organization":"Twitter (now X)","incident_date":"2020-07-15","date_basis":"incident","source_type":"vendor_postmortem","source_title":"An update on our security incident","source_publisher":"Twitter (X)","source_url":"https://blog.x.com/en_us/topics/company/2020/an-update-on-our-security-incident","failure_patterns":"SEA-FM-002;SEA-FM-012","capabilities":"auth.privileged_action;data.credentials_secrets;arch.multi_tenant","is_ai_system":false,"is_agentic":false,"safeguards":"Require two-person approval for high-impact account actions: Actions such as password resets on high-profile accounts should need a second authorised person. | Phishing-resistant authentication and full audit of support tools: Protect internal tool access with hardware keys and log every action with the actor and target.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-020"}
{"incident_id":"SEA-SEC-021","evidence_tier":"documented_incident","title":"MFA fatigue against a contractor gives an attacker access to Uber's internal tools (2022)","summary":"An attacker likely bought a contractor's corporate password on the dark web after malware infected the contractor's personal device, then repeatedly sent two-factor approval requests until the contractor accepted one.","organization":"Uber","incident_date":"2022-09-16","date_basis":"disclosure","source_type":"vendor_postmortem","source_title":"Security update","source_publisher":"Uber","source_url":"https://www.uber.com/newsroom/security-update/","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets;auth.privileged_action;fail.auth_boundary_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Use phishing- and fatigue-resistant MFA: Number matching, passkeys or hardware keys prevent approval-prompt spam from being accepted blindly. | Treat contractor access as high risk: Require managed devices, rate-limit and alert on repeated MFA prompts, and limit what contractor accounts can reach.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-021"}
{"incident_id":"SEA-SEC-022","evidence_tier":"documented_incident","title":"AWS access key in a private GitHub repository leads to 57 million rider and driver records taken (Uber, 2016)","summary":"Between October 13 and November 15, 2016, intruders used an AWS access key that had been posted to a private GitHub repository to access Uber's Amazon S3 datastore.","organization":"Uber","incident_date":"2016-10-13","date_basis":"incident","source_type":"regulator_report","source_title":"FTC analysis of revised proposed consent order: Uber Technologies","source_publisher":"U.S. Federal Trade Commission","source_url":"https://www.ftc.gov/system/files/documents/cases/1523054_uber_technologies_revised_analysis.pdf","failure_patterns":"SEA-FM-012;SEA-FM-013","capabilities":"data.credentials_secrets;data.pii;auth.infrastructure_modification","is_ai_system":false,"is_agentic":false,"safeguards":"Keep secrets out of repositories: Scan for access keys before commit and push, use short-lived role credentials instead of long-lived keys. | Enforce MFA and unique credentials for code hosting: Require company-managed, MFA-protected accounts so passwords from other breaches cannot be reused.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-022"}
{"incident_id":"SEA-SEC-023","evidence_tier":"documented_incident","title":"Stolen OAuth tokens from two integrators are used to download private repositories (Heroku and Travis CI, 2022)","summary":"GitHub found an attacker abusing stolen OAuth user tokens that had been issued to two third-party integrators, Heroku and Travis CI.","organization":"GitHub / Heroku / Travis CI","incident_date":"2022-04-15","date_basis":"disclosure","source_type":"vendor_postmortem","source_title":"Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators","source_publisher":"GitHub","source_url":"https://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens/","failure_patterns":"SEA-FM-012","capabilities":"data.credentials_secrets;arch.external_api;fail.auth_boundary_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Minimise and protect stored OAuth tokens: Store integration tokens encrypted, scope them narrowly, expire them and revoke quickly on suspicion. | Monitor token use for anomalies: Alert on tokens used from unexpected networks or enumerating many repositories.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-023"}
{"incident_id":"SEA-SEC-024","evidence_tier":"documented_incident","title":"Attack on a senior DevOps engineer's computer leads to theft of cloud backups (LastPass, 2022-2023)","summary":"LastPass said an attacker exploited vulnerable third-party software to target a senior DevOps engineer.","organization":"LastPass","incident_date":"2023-03-01","date_basis":"disclosure","source_type":"vendor_postmortem","source_title":"Security Incident Update and Recommended Actions","source_publisher":"LastPass","source_url":"https://blog.lastpass.com/posts/2023/03/security-incident-update-recommended-actions","failure_patterns":"SEA-FM-012;SEA-FM-014","capabilities":"data.credentials_secrets;auth.privileged_action;fail.auth_boundary_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Separate privileged engineering access from personal environments: Require managed, hardened devices for anyone who can reach production backups or keys. | Limit and segment access to backup storage: Restrict who can read backups, log access and keep decryption material out of the same reach.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-024"}
{"incident_id":"SEA-SEC-025","evidence_tier":"documented_incident","title":"SQL injection in MOVEit Transfer exploited by the CL0P ransomware gang (2023)","summary":"CISA and the FBI report that the CL0P ransomware gang exploited a SQL injection vulnerability (CVE-2023-34362) in Progress MOVEit Transfer beginning May 27, 2023, installing a web shell called LEMURLOOT.","organization":"Progress Software MOVEit customers","incident_date":"2023-06-07","date_basis":"disclosure","source_type":"regulator_report","source_title":"#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability","source_publisher":"CISA and FBI","source_url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-158a","failure_patterns":"SEA-FM-013;SEA-FM-002","capabilities":"data.uploaded_files;fail.auth_boundary_failure;data.regulated_records","is_ai_system":false,"is_agentic":false,"safeguards":"Patch internet-facing transfer tools immediately: Track exposure of file-transfer systems and apply vendor fixes on an emergency timeline. | Reduce what a transfer server can hold and reach: Delete data after transfer, segment the server and alert on new administrator accounts or web shells.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-025"}
{"incident_id":"SEA-SEC-026","evidence_tier":"documented_incident","title":"Log4Shell: remote code execution through JNDI lookups in Apache Log4j (2021)","summary":"CVE-2021-44228 (Log4Shell) affects Apache Log4j 2.0-beta9 through 2.14.1 and lets an unauthenticated remote actor execute arbitrary code through JNDI lookups.","organization":"Apache Log4j users","incident_date":"2021-12-10","date_basis":"disclosure","source_type":"regulator_report","source_title":"Apache Log4j Vulnerability Guidance","source_publisher":"CISA","source_url":"https://www.cisa.gov/news-events/news/apache-log4j-vulnerability-guidance","failure_patterns":"SEA-FM-013;SEA-FM-002","capabilities":"auth.code_execution;data.untrusted_external_text;fail.auth_boundary_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Maintain a software bill of materials and patch fast: Know where each library runs so an emergency fix can be applied within hours. | Do not interpret untrusted input as lookups or code: Disable dangerous features such as remote JNDI lookups and restrict outbound connections from servers.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-026"}
{"incident_id":"SEA-SEC-027","evidence_tier":"documented_incident","title":"Stolen OAuth tokens from the Salesloft Drift integration are used to export data from customers' Salesforce instances (2025)","summary":"From as early as August 8 to at least August 18, 2025, an actor tracked as UNC6395 used compromised OAuth tokens of the Salesloft Drift third-party application to access customers' Salesforce instances.","organization":"Salesloft Drift customers","incident_date":"2025-08-08","date_basis":"incident","source_type":"verified_journalism","source_title":"Widespread Data Theft Targets Salesforce Instances via Salesloft Drift","source_publisher":"Google Threat Intelligence Group","source_url":"https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift","failure_patterns":"SEA-FM-012;SEA-FM-002","capabilities":"data.credentials_secrets;arch.external_api;data.pii;fail.auth_boundary_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Scope and expire third-party integration tokens: Grant integrations the narrowest data access they need, rotate their tokens, and revoke them quickly when the vendor reports a compromise. | Monitor integrations for bulk export: Alert on unusually large queries or exports performed through a connected app's credentials.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-027"}
{"incident_id":"SEA-SEC-028","evidence_tier":"documented_incident","title":"GitHub Actions injection leaks Nx's npm token; malicious packages use local AI coding tools to hunt for secrets (2025)","summary":"A pull-request title validation workflow used pullrequesttarget, which runs with repository secrets, and echoed the unsanitized PR title, creating an injection point; the workflow's token also had read/write permissions.","organization":"Nx (Nrwl)","incident_date":"2025-08-26","date_basis":"incident","source_type":"vendor_postmortem","source_title":"S1ngularity - What Happened, How We Responded, What We Learned","source_publisher":"Nx","source_url":"https://nx.dev/blog/s1ngularity-postmortem","failure_patterns":"SEA-FM-002;SEA-FM-012;SEA-FM-010","capabilities":"auth.code_execution;data.credentials_secrets;data.untrusted_external_text;arch.tool_enabled_agent;auth.public_publication","is_ai_system":true,"is_agentic":true,"safeguards":"Never run untrusted pull-request input with secrets: Avoid pull_request_target for workflows that read PR content, treat titles and bodies as untrusted input, and give workflow tokens read-only permissions by default. | Require trusted publishing and human approval for releases: Publish packages through short-lived trusted-publisher credentials and a manual approval step rather than a long-lived token in CI.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-028"}
{"incident_id":"SEA-SEC-029","evidence_tier":"documented_incident","title":"Self-replicating \"Shai-Hulud\" worm compromises more than 500 npm packages by stealing developer tokens (2025)","summary":"CISA reported that a self-replicating worm known as \"Shai-Hulud\" had compromised more than 500 npm packages.","organization":"npm ecosystem","incident_date":"2025-09-23","date_basis":"disclosure","source_type":"regulator_report","source_title":"Widespread Supply Chain Compromise Impacting npm Ecosystem","source_publisher":"Cybersecurity and Infrastructure Security Agency (CISA)","source_url":"https://www.cisa.gov/news-events/alerts/2025/09/23/widespread-supply-chain-compromise-impacting-npm-ecosystem","failure_patterns":"SEA-FM-012;SEA-FM-014","capabilities":"data.credentials_secrets;auth.code_execution;auth.public_publication;fail.cascading_dep_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Keep publishing credentials out of developer environments: Use short-lived, scoped publishing tokens or trusted publishing, so malware on a laptop or CI runner cannot republish packages. | Pin and review dependency updates: Install from a lockfile, delay adopting brand-new package versions and block install scripts where possible.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-029"}
{"incident_id":"SEA-SEC-030","evidence_tier":"documented_incident","title":"\"ToolShell\" vulnerabilities in on-premises SharePoint are exploited to steal server keys (2025)","summary":"Microsoft observed attackers exploiting on-premises SharePoint Server vulnerabilities (CVE-2025-53770 and CVE-2025-53771, related to CVE-2025-49704 and CVE-2025-49706) against internet-facing servers, with attempts as…","organization":"Microsoft SharePoint Server customers","incident_date":"2025-07-22","date_basis":"disclosure","source_type":"vendor_postmortem","source_title":"Disrupting active exploitation of on-premises SharePoint vulnerabilities","source_publisher":"Microsoft Security","source_url":"https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/","failure_patterns":"SEA-FM-013;SEA-FM-012","capabilities":"auth.code_execution;data.credentials_secrets;fail.auth_boundary_failure","is_ai_system":false,"is_agentic":false,"safeguards":"Patch internet-facing servers on a short deadline: Track exposed systems and apply emergency updates within days when exploitation is reported. | Rotate secrets after a compromise, not only patch: Treat cryptographic keys and tokens on an exploited server as stolen and replace them as part of remediation.","cve_references":"","review_status":"machine_extracted","record_url":"https://collectsea.com/incidents/SEA-SEC-030"}